Recently i was asked to advise in the following scenario: VPN tunnel between AWS VPC and Cisco IOS routers on DC prem. Nothing sophisticated but: Two ISR 4k, HSRP VPN redundancy, legacy crypto maps in production (several working vpns) and Static VTI (AWS). Two Crypto structures sourced from one HSRP. I have put the results on blog.