AWS directly supports another type of VPN connection, known as a hardware VPN.
For this, you attach a virtual private gateway to your VPC and install a supported customer gateway in your data center:
Like the software VPN, traffic is encrypted with IPsec tunneling. Both hardware and software VPNs use the public internet for the transport layer.