Exposing internal Wowza Streaming Engine to external consumers

We have Wowza Streaming Engine running on a server in our LAN. Currently external users use VPN to connect to our network to consume streams. We’re looking for a scalable solution to expose the internal Engine to external users where the users don’t have to VPN. What would a potential solution look like? Is installing Wowza live stream repeater on an Amazon VPC and then connecting it to the internal server via VPN an option?