I believe a route scoped for the address space of the VPC is created auto-magically, but we should confirm that next time this is run.