A company requires a private, dedicated network connection between its on-premises data center and AWS that does not traverse the public internet. Which AWS option meets this requirement?

AWS Direct Connect establishes a dedicated network connection from your on-premises data center to AWS, bypassing the public internet. This provides a private, consistent, and lower-latency network experience, ideal for hybrid cloud environments and large data transfers. AWS Transit Gateway connects multiple VPCs and on-premises networks, but it doesn't provide the dedicated physical connection itself. AWS VPN creates an encrypted connection over the public internet, which doesn't meet the "does not traverse the public internet" requirement. Amazon CloudFront is a content delivery network (CDN) service, unrelated to private network connectivity between on-premises and AWS.