A large municipality wants private, dedicated network connectivity from its data center to AWS with more consistent performance than a VPN over the public internet. Which service should they identify?
Select an answer to reveal the explanation.
Short Explanation
Direct Connect is the private leased line into AWS—more like a dedicated road than a VPN carpool over the public internet. CloudWatch Alarms watch metrics, SES sends email, and Free Tier is a pricing benefit—not a physical private circuit.
Full Explanation
A large municipality that wants private, dedicated network connectivity from its data center to AWS with more consistent performance than a VPN over the public internet should identify AWS Direct Connect. Direct Connect establishes dedicated private connectivity between on-premises networks and AWS through a Direct Connect location or partner circuit, improving consistency and bandwidth characteristics relative to internet-only VPN paths for steady civic workloads such as large backups, imaging, or continuous hybrid application traffic.
Amazon CloudWatch Alarms observe metrics and can invoke actions; they are not a dedicated private circuit to AWS. Amazon SES is an email sending service; it is not a private Layer-3 dedicated link into VPC subnets. AWS Free Tier is a pricing benefit for eligible usage, not a physical cross-connect product a municipality orders for datacenter connectivity.
Exam caveat: Dedicated private connectivity and more consistent performance than internet VPN → Direct Connect. Encrypted tunnels over the internet → Site-to-Site VPN. Monitoring, email, and billing constructs are distractors.
Operational check: engage a Direct Connect partner for the municipal datacenter circuit, create virtual interfaces to the appropriate gateway, plan redundant connections for resilience, retain VPN as backup, validate routing with network engineering, and re-test application SLAs for large overnight transfers after the dedicated circuit is in production.