AWS Certified Security - Specialty (#43)

An organization is moving non-business-critical applications to AWS while maintaining a mission-critical application in an on-premises data center. An on-premises application must share limited confidential information with the applications in AWS. The internet performance is unpredictable. Which configuration will ensure continued connectivity between sites MOST securely?

VPN and a cached storage gateway
AWS Snowball Edge
VPN Gateway over AWS Direct Connect
AWS Direct Connect