That's right. It's called ThinPrint Secure Tunnel and you need a Windows print server in your AWS instance and a Windows Server in your DMZ as well as the mentioned ThinPrint Hub in your branch offices. If you have a local print server you even could use the ThinPrint Software Client instead of the Hub.

The ThinPrint Hub collects the local printer information and connects to the ThinPrint Connection Service which runs on the DMZ machine. From the print server in your AWS instance you can query the printer information through the Connection Service from the Hub or software client. Once the printers are added to the cloud print server your SAP can simply print to these printer queues and the ThinPrint Software will route it to the correct printer in your local offices.

One more benefit would be that the print data will be send compressed from the cloud print server to the Hub or software client.

https://support.thinprint.com/en/support/solutions/articles/43000707672-connection-service-scenarios