Your company has asked you to connect their on-premise environment to AWS. The traffic must be encrypted and reliability should be ensured. There is a requirement to access S3 resources in AWS from the on-premise environment. Which of the below ways can be used to fulfil this requirement. Choose 2 answers from the options given below

Answer options:

A.Create a VPN connection
B.Create a Direct Connect connection with a private virtual interface
C.Create a Direct Connect connection with a hosted virtual interface
D.Create a Direct Connect connection with a public virtual interface

Answer - A and D
The AWS documentation mentions the following
You can create an IPsec VPN connection between your VPC and your remote network. On the AWS side of the VPN connection, a virtual private gateway provides two VPN endpoints (tunnels) for automatic failover. You configure your customer gateway on the remote side of the VPN connection.
You must create a virtual interface to begin using your AWS Direct Connect connection. You can create a private virtual interface to connect to your VPC, or you can create a public virtual interface to connect to AWS services that aren`t in a VPC, such as Amazon S3 and Amazon Glacier. You can configure multiple virtual interfaces on a single AWS Direct Connect connection
For more information on VPN connections please refer to the below URL:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpn-connections.html
For more information on Virtual interfaces please refer to the below URL:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.html