A popular aphorism is "There is no 'Cloud' - it's just someone else's computer".

But not only is it someone else's computer... it's someone else's IP addresses (usually) and someone else's namespaces, both DNS and otherwise.

The devil is in the details, and we keep tripping over them where we try to apply traditional threat mitigation techniques to "the cloud".

Put that one in your pipe and smoke it.