A company with a hybrid cloud setup wants to ensure that their AWS-hosted applications can communicate securely with their on-premises databases. What should they implement?