I think there's some "cheat codes" now involving some of these things though. For instance, you can use some of AWS but keep your actual compute/networking out and have things like security patching and server inventory be completely solved by using AWS SSM. There's also options like EKS Anywhere to have managed on-prem k8s for way, way cheaper than running it in AWS proper. These kinds of services I think are the future for hybrid/on-prem folks.