I can also run a WireGuard VPN with AWS as the endpoint. The second way works better on slow connections.