Use private IP VPN and AWS Direct Connect, encrypting traffic between your on-premises network and AWS, without using public IP addresses or third-party VPN equipment.