Does the runner VM need internet access to stream logs back?

If a customer doesn't allow any external access, are there trade-offs or can it run fully locally? In open source vs Nuon Cloud, do you lose the dashboard? Why doesn't AWS or other clouds offer this? Walk through the artifact flow - if we have terraform, helm charts, and container images, how does that work with Nuon? What happens if the runner fails?