If all the applications, virtual machines and services we use at our company are hosted in different clouds and assuming all these services are accessed through encrypted layers (https/TLS/ssl ...).
Does getting a VPN so every employees trafic goes through our companies internet connexion (even if he's not physically in our HQ location) makes sens or is it totaly a waste of both money and bandwidth ?
I see only one usage for the VPN, and it's to have the same static IP for everyone so we can whitelist this IP only for admin access and direct access to our virtual machines and databases, instead of maintaining multiple whitelisted IPs or letting any IP trying to log on our servers and applications.
We have MFA and strong passwords, most of our files and datas are on services like Onedrive, Office 365 etc and most of our customers websites needs to be able to be accessed by any IP. So the one unique IP whitelisted rule would only be usefull for a handfull of virtual machines or databases.
Have I missed any usage ? Do I miss something, because a VPN do not look like very interesting in our case ?
I have read this question Does routing internet traffic via VPN through a company proxy gain any more security? and their answers but It is more about the utility of a proxy, which we do not plan on implementing for now.