Site-to-site VPN architecture connecting a corporate office (with LAN, VPN gateway, and firewall) through an IPsec encrypted tunnel to a cloud VPC with public, private, and database subnets.