A healthcare company needs to connect its on-premises data center to a VPC to allow internal applications to communicate with EC2 instances hosting a patient records system. The connection must be encrypted in transit, and the company wants to implement it quickly without waiting for a dedicated physical circuit to be provisioned. The traffic volume is moderate and occasional latency is acceptable. Which solution meets these requirements MOST cost-effectively?