A company uses a 1 Gbps Direct Connect link to connect AWS to its datacenter. Employees access an application in AWS; many remote workers also VPN to the datacenter. During business hours both remote and on-site users report slowness. The company will deploy an additional AWS application that will require about 20% more bandwidth and wants more resilient AWS connectivity on a limited budget. What is the most cost-effective change?

The most cost-effective solution is to offload remote worker traffic from the Direct Connect link. Setting up an AWS Site-to-Site VPN connection to the application VPC allows remote employees to access AWS resources directly over the internet, bypassing the Direct Connect. This frees up bandwidth on the existing 1 Gbps Direct Connect for on-premises users and the new application, addressing both the current slowness and future bandwidth needs without incurring significant additional costs for new Direct Connect links. Ordering a second 1 Gbps dedicated Direct Connect is expensive and might not be immediately available. Deploying Amazon WorkSpaces is a costly solution for simply improving connectivity. Replacing the existing Direct Connect with two new 2 Gbps hosted connections is significantly more expensive and complex than necessary, and AWS Client VPN would still require the underlying network capacity.