How do you manage cloud access for your team without a VPN?

Running a small team and trying to figure out how others handle this.

The two options I keep seeing are VPNs — which work but add meaningful overhead for a 5-25 person team — or security groups with static IP whitelisting, which breaks the moment someone travels or works remotely.

Curious how others have solved this in practice:

- Are you running a VPN? If so, which one and how painful is it to manage? - Static IPs per employee? - Something else entirely?

Context: I'm building in this space and want to understand real-world approaches before assuming my solution is the right one.