To meet regulatory requirements, a solutions architect must design a solution that stores the company's critical data in multiple public AWS Regions (including the U.S.) and provides access to that data from the company’s global WAN. Security requires that traffic to this data must not traverse the public internet. Which design provides a highly available, cost-effective solution that meets these constraints?

The correct solution uses a Direct Connect Gateway, which allows you to connect your on-premises network to multiple AWS Regions using a single Direct Connect connection. This is highly available with two connections and cost-effective as it avoids establishing separate Direct Connect connections to each Region. It also ensures traffic does not traverse the public internet. Establishing Direct Connect to every AWS Region is costly and complex. Using inter-region VPC peering or a transit VPC architecture after reaching a single Region via Direct Connect would still require traffic to traverse the AWS global network, but not the public internet. However, Direct Connect Gateway is the most direct and recommended method for connecting to multiple Regions from a single Direct Connect location.