Your company is planning to implement a secure remote access solution for its IT administrators. The solution must allow secure access to instances without exposing them to the public internet. Which AWS service would be most appropriate for this requirement?