You are tasked with designing a secure connectivity solution between an AWS environment and an on-premises data center. The solution must ensure that all data in transit is encrypted and integrity is maintained. Which combination of AWS services would you use to achieve this?