You have been given a new brief from your supervisor for a client who needs a web application set up on AWS. The most important requirement is that MySQL must be used as the database. This database must not be hosted in the public cloud but rather at the client`s data center due to security risks. Which of the following solutions would be the best to assure that the client’s requirements are met? Choose the correct answer from the options below.

Answer options:

A.Build the application server on a public subnet and the database at the client’s datacenter. Connect them with a VPN connection that uses IPsec.
B.Use the public subnet for the application server and use RDS with a storage gateway to securely access and synchronize the data from the local data center.
C.Build the application server on a public subnet and the database on a private subnet with a NAT instance between them.
D.Build the application server on a public subnet and build the database in a private subnet with a secure ssh connection to the private subnet from the client`s data center.

Answer – A
Since the database should not be hosted on the cloud, all other options are invalid.
The best option is to create a VPN connection for securing traffic as shown below.
Option B is invalid because this is the incorrect use of the Storage gateway.
Option C is invalid since this is the incorrect use of the NAT instance.
Option D is invalid since this is an incorrect configuration.
For more information on VPN connections, please visit the below URL:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_VPN.html