Setting up a HYOK scenario with AWS is usually simple and straightforward. The creation of a VPN tunnel between your company and AWS is independent from the HSM; and once the tunnel has been established the HSM can be reached via IP as if it was on local network. Mutual Authentication provides additional security for such remote connection scenarios.