A multinational financial services firm must connect its on-premises data center to workloads hosted in a public cloud region. The security and compliance team mandates that all cloud connectivity align with ISO/IEC 27001 controls, specifically ensuring that customer data in transit is never exposed to the public internet and that the connection provides auditable, predictable, and consistent performance for regulator reporting. Cost is a secondary concern relative to compliance and traceability. Which connectivity model should the network architect recommend?