vMX and AWS, what kind of VPC is needed?

[LucPaquet]

When we created a VPC to host a vMX, we have 4 choices VPC 

- VPC with a Single Public Subnet

- VPC with Public and Private Subnets

- VPC with Public and Private Subnets and Hardware VPN Access

- VPC with a Private Subnet Only and Hardware VPN Access

Which one should I choose if I want to route all internet traffic (in and out) to use the vMX? The last 2 create a IPSEC VPN, my guest is to use the first or the second one.

Thanks

[PhilipDAth]

The vMX is only used for AutoVPN.  So you will only be routing traffic to remote branches via it, and not general Internet traffic.  It has to attach to the Internet, so it must be in a VPC with a public subnet.