Your company has a hybrid cloud environment with both on-premises and AWS resources. You need to establish a secure connection between the on-premises data center and AWS to enable secure access to AWS resources. Which of the following AWS services should you use to achieve this?