When creating a VPG to AWS the data is stored in S3 and all replicated data from protected VMs to AWS is encrypted in S3. All recovery operations bring up the recovered VMs in EC2.

S3 = Amazon Simple Storage Service
EC2 = Amazon Elastic Compute Cloud