Does AWS VPN connections allow you to meet NCSC Prime requirements?
IKEv2 Encryption -AES-128 in GCM-128 (and optionally CBC) Pseudo-random function - HMAC-SHA256 Dif
