Which combination of steps should the company implement to establish a secure, dedicated bandwidth connection between its VPC and on-premises data center, ensuring data is encrypted in transit, while collaborating with an AWS Partner Network (APN) Partner? (Choose three.)