A technology firm needs to design a network that allows for private connectivity between their AWS and on-premises environments without going over the internet. What AWS service should they consider?