A company needs a private, dedicated connection between its data center and AWS that bypasses the public internet entirely. Which service should they order?
Show answer and explanation
Answer: B
Direct Connect provides a dedicated physical circuit from a customer or partner location to an AWS Direct Connect location, carrying private VLANs that never touch the public internet. It offers predictable latency and consistent bandwidth, and can be combined with a VPN for encryption.
Site-to-Site VPN also avoids sending application traffic in the clear, but it runs over the public internet.
Why the other options are wrong
- A. Site-to-Site VPN builds an encrypted tunnel across the public internet. It is private in content but not in path.
- C. Client VPN connects individual remote users to a VPC. It is not a dedicated data-center link.
- D. VPC peering links two VPCs inside AWS. It has no role in connecting an on-premises network.
Exam tip. Dedicated private circuit equals Direct Connect; encrypted over internet equals VPN.