Of course if you route everything through the public internet layer, you are not doing anything good to your business security measures. That shouln't be a cons

Of course if you route everything through the public internet layer, you are not doing anything good to your business security measures. That shouln't be a considered option, not even the last one in the list. You can use a Direct Connect [1] option if you want a dedicated connection between your data center and AWS. Its more secure, but more hard-to-maintain and a bit more costly than VPN option. [1] https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-direct-connect.html https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-conne...