VPC with a Private Subnet Only and AWS Site-to-Site VPN Access