Mass-scan runs fine in somebody else's cloud account 😂🤣😂, and they have plenty of cards to get seeded.
If anything the cloud surely makes it easier for threat actors to cash out in alt coins by abusing any scaling in place or sweating free resources, also cloud to cloud attacks are prevalent when SaaS such as Docs/Office and all require huge subnets opening for any integrations to work.
So I would say they are more likely to have the agility to leverage cloud better the big enterprise!