Cloud to on-prem lateral movement