1. deploy netmaker in VPC on EC2 2. create network 3. set netmaker-1 node as egress to VPC 4. set netmaker-1 node as ingress 5. generate ext client (static wireguard config) 6. add static wireguard config to mikrotik