When you want multiple Remote Offices to connect to a VPC or AWS Resources in a hub and spoke model.

Hub and Spoke model is a distribution model that, as opposed to Point2Point, has not direct communication among different points in the system, rather everything has to go to a central hub and is then forwarded to the other spoke.

hub and spoke model

The cool thing about this architecture is that you can reuse existing Internet connections - each remote office will have its own Customer Gateway and can communicate with each other via the Virtual Private Gateway. The main con is that, it is dependent on internet connections and has no inherent redundancy.

You can use Site2Site VPN to establish a routing topology among Customer Offices and VPC itself.

Cloud Hub

Read more about Providing secure communication between sites using VPN CloudHub here

As a final topic, it is interesting to know that traffic information flowing to and within your VPC can be logged using VPC Flow Logs.