Scenario 4 – VPC with a private subnet only and hardware VPN access