Anyconnect VPN user is connecting from an AWS IP, is there a reason for this?

Hey all, I've been asked to look into a particular user at a fintech company. Her IP when connecting to VPN is coming from an AWS IP (54.159.x IP) for the past 3 months, as far as our logs allow. I don't typically research users or IPs but this stuck out as odd to me. I would expect to get an ISP address and our rules state you must be directly coming in from home, no tunneling, etc. reverse lookup …

anyconnect aws cybersecurity ip vpn