> How can you establish a secure connection from your office or on-premises datacenter to AWS?
> Connections to AWS resources are typically encrypted by default (HTTPS, SSH, etc.)
> You can establish a Site-to-Site VPN between your VPC and your on-premises network.
> If you do not want traffic to cross the internet, you may be able to establish a Direct Connect connection, which is a dedicated network connection between your on-premises network and an AWS edge location (from where traffic is routed to your AWS resources using AWS' internal networks).
I want to note that Direct Connect traffic is NOT encrypted by default and this is common misconception, both in real life and in exams. You must combine DX and S2S VPN.
https://docs.aws.amazon.com/directconnect/latest/UserGuide/e...