In a hybrid cloud design, which service provides private, secure connectivity between on-premises data centers and AWS?

• A. Amazon RDS
• B. AWS Direct Connect
• C. AWS Lambda
• D. Amazon Redshift

Answer: (B)

Private, dedicated network connectivity between on‑premises data centers and AWS is provided by AWS Direct Connect. It creates a direct, private link from your environment to AWS, so traffic doesn’t traverse the public Internet. This leads to improved security, more consistent latency, and predictable bandwidth, which is especially valuable in hybrid cloud setups that require reliable data transfer and application traffic between on‑premises and AWS.

You typically connect through a Direct Connect location and can use a private virtual interface to connect to your VPC, with the option to use a Direct Connect Gateway to reach multiple VPCs or regions. While there are other ways to interconnect environments, such as VPN over the Internet, Direct Connect offers a private, dedicated path that is purpose-built for hybrid connectivity.

The other services serve different purposes: a managed database service, a serverless compute service, and a data warehouse, none of which provide the private connectivity between on‑premises and AWS.