A global corporation maintains apps in three distinct AWS regions. These programs must connect securely with one another

[answerhappygod]

A global corporation maintains apps in three distinct AWS regions. These programs must connect securely with one another over VPN.
The VPN must adhere to the following standards, as determined by the organization's security team:
✑ 128-bit AES encryption
✑ Hashing using SHA-1
✑ Access to users through SSL VPN
✑ PFS based on DH Group 2
✑ Capability of storing/rotating keys and passwords
✑ Authentication using certificates

Which approach should you suggest to ensure that the company complies with the regulations?

A. AWS hardware VPN between the virtual private gateway and customer gateway
B. A third-party VPN solution deployed from AWS Marketplace
C. A private MPLS solution from an international carrier
D. AWS hardware VPN between the virtual private gateways in each region