The correct answer is A: 'Establish a VPC peering connection between VPC-A and VPC-B.' This solution provides a direct network route between the two VPCs, ensuring secure access without going over the public internet. VPC peering has no single point of failure as it is fully redundant by design, and it does not have inherent bandwidth constraints. Other options either introduce single points of failure or are not suited for the requirements stated.