> There is zero lock-in with appropriate architecture decisions.
Sigh, you don't know what you're talking about.
Everything past "make VM" is lockin. Firewall rules, be they security groups, NACLs, or what have you are different for each platform. Each service you use is lockin. Even the build scripts themselves are lockin. The users within the console, and all their associated permissions are lockin.
Do you want load balancers? AWS - so.. thats ALBs, or NLBs, or CLBs? Or did you want to spin up a bunch of dinky ec2 haproxy dockers? Does your application use sticky sessions or have session data? That limits you in a bit of ways.
There is no neutral way to talk about network, compute, storage, and api assets that don't involve lockin of a great deal.