A SaaS company is transitioning its private SaaS application to AWS. The company has numerous customers connecting to multiple data centers via VPN tunnels. As the customer base has expanded, managing routing, segmentation, and complex NAT rules has become increasingly challenging. After migrating to AWS, the company's AWS-based customers need direct access to the SaaS application from their VPCs, while on-premises customers must continue accessing the application through IPsec-encrypted tunnels. What solution will fulfill these requirements? | AWS Certified Advanced Networking - Specialty Quiz