A financial services company runs a legacy transaction-processing system in its on-premises data center that must exchange large volumes of sensitive data with new analytics workloads in a public cloud provider. Compliance requires that this traffic never traverse the public internet, and the analytics team reports that batch transfers must complete within a predictable time window each night. The current site-to-site VPN over the internet suffers from variable latency and throughput. Which connectivity option should the cloud architect recommend?