Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?

Explanations:

Amazon Route 53 is a scalable Domain Name System (DNS) web service that provides domain registration and DNS routing but does not establish private connections between on-premises and AWS workloads.

Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS but does not create private connections between on-premises and AWS environments.

AWS Direct Connect provides a dedicated network connection from your on-premises data center to AWS, enabling a private and high-bandwidth connection that reduces latency and provides consistent network performance.

AWS PrivateLink allows private connectivity to services hosted on AWS from your virtual private cloud (VPC), but it is primarily used for connecting to AWS services privately rather than creating a direct connection from on-premises workloads.