If you still want to remain in the cloud? Shell game. Contract another company to setup and run everything on the cloud side and mask the traffic. Hiding the traffic can be as simple as front end proxies into a VPN to AWS. Or even just SSL traffic. AWS or what ever cloud provider would be none the wiser unless they are actively looking inside everyone's boxes. Which I highly doubt they are.