AWS VPN indeed allows for the creation of an encrypted connection over the internet, enabling secure communication between an on-premises data center and AWS resources. This service uses existing internet connections, therefore eliminating the need for dedicated physical hardware. This approach is beneficial for organizations looking for a secure, scalable, and cost-effective way to connect to AWS without investing in additional hardware like leased lines.