A financial services company has established a 10 Gbps AWS Direct Connect dedicated connection between its on-premises data center and AWS. A new compliance requirement mandates that all data traversing the physical connection be encrypted at Layer 2. The security team wants the lowest-latency solution that meets this requirement without adding an overlay tunnel. What should the solutions architect recommend?