PXE boot probably booted from AWS or a cloud service, loaded the OS and reported results to the cloud service.
PXE boot is basically booting the operating system from a network server. Windows or whatever OS is hosted elsewhere, not on the local machine
Well, it's all about the routers, they could be directing the PXE boot to a remote or cloud server
Both settings are equally bad. Need to see configs and log files next. Need the splunk logs. Splunk is basically a repository that aggregates logs from my systems for monitoring and reporting
What about LAN PXE via vpn/ipsec tunnel on the router?