Which service is BEST suited for connecting an on-premises data center and AWS over a dedicated line that does not traverse the internet, ensuring stable bandwidth and consistent low latency?
Selecting a service that connects on-premises and AWS over a dedicated line.
AWS Site-to-Site VPN
AWS Site-to-Site VPN connects on-premises and AWS by building an encrypted tunnel over the internet.
It is easy to set up, but the path depends on internet quality, so the requirement for 'does not traverse the internet, stable bandwidth, and consistent low latency' is met by Direct Connect, and this is incorrect.
AWS Transit Gateway
AWS Transit Gateway is a network relay service that aggregates many VPCs and on-premises connections into a single hub.
Its role is aggregating and relaying connections, and it does not itself provide the physical dedicated line to on-premises, so it is incorrect (the dedicated line is provided by Direct Connect, used together with TGW).
AWS PrivateLink
AWS PrivateLink is a mechanism that makes communication from a VPC to a specific service a private connection within the AWS network.
Its target is service access within AWS, and it does not provide a physical dedicated line connecting an on-premises data center and AWS, so it is incorrect.
AWS Direct Connect
Correct. AWS Direct Connect is a service that connects on-premises and AWS over a dedicated physical line that does not traverse the internet. It provides stable bandwidth and consistent low latency and suits hybrid architectures that require high capacity and high reliability.
'Dedicated line', 'does not traverse the internet', and 'stable bandwidth and low latency' point to AWS Direct Connect. It contrasts with the encrypted connection over the internet, Site-to-Site VPN (easy, but its line quality depends on the internet).