A county must connect on-premises computer-aided dispatch (CAD) servers to a VPC for hybrid lookups without exposing CAD RDP to the open internet. Which connectivity approach should the architect choose?
Select an answer to reveal the explanation.
Short Explanation
Hybrid lookups need a private tunnel between the county datacenter and the VPC—not RDP hanging out on the internet. Site-to-Site VPN or Direct Connect with proper routing keeps CAD off the public sidewalk. Public RDP, anonymous S3 dumps, or wide-open security groups are non-starters for dispatch systems.
Full Explanation
Secure hybrid connectivity uses AWS Site-to-Site VPN and/or AWS Direct Connect to extend private network reachability into a VPC with controlled routing and security groups. Exposing CAD RDP on public IPs, even on unusual ports, invites internet scanning. Hourly public S3 copies and disabled security groups discard confidentiality and least privilege. The architect selects private hybrid links for on-premises-to-VPC lookups.