aws has its own vpn gateway too, which i see can be used by wireguard here https://medium.com/@autogun/aws-site-to-site-vpn-with-mikrotik-routeros-5977ca5e50ae