A company is migrating its on-premises MongoDB database to Amazon DynamoDB.The security team mandates that all data must be transferred over a dedicated, private, and secured connection with no data transport occurring over the public Internet. Which AWS services must be part of the solution (Select TWO)?

Answer options:

A.VPC Peering
B.Site-to-site VPN
C.Direct Connect
D.PrivateLink Interface Endpoint
E.PrivateLink Gateway Endpoint

Answer: C and E
Option A is incorrect because VPC peering is used to establish connectivity between two Amazon VPC’s.
Option B is incorrect because Site-to-site VPN can be used to establish a secure and private connection between an on-premises network and Amazon VPC over the Internet.
Option C is CORRECT because AWS Direct Connect can be used to establish a secure and private connection between an on-premises network and Amazon VPC over a dedicated line.
Option D is incorrect because PrivateLink Interface Endpoint does not support DynamoDB.Option E is CORRECT PrivateLink Gateway endpoint is used to integrate DynamoDB to Amazon VPC without the use of Internet Gateway.
Reference:
https://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html
https://docs.aws.amazon.com/vpc/latest/userguide/vpce-gateway.html