Hybrid Connectivity — Direct Connect and Site-to-Site VPN

Implement professional AWS hybrid connectivity patterns for SAP-C02 Domain 2 (Design Resilient Architectures) and Domain 3 (Design High-Performing Architectures). Create a multi-subnet VPC with public and private tiers. Configure Virtual Private Gateway and Customer Gateway for simulated on-premises integration. Establish a Site-to-Site VPN connection with BGP dynamic routing, route propagation, and tunnel endpoint configuration. Build a CloudWatch dashboard for connectivity monitoring and document hybrid architecture decisions covering when to use VPN versus Direct Connect, BGP versus static routing tradeoffs, redundant tunnel design, and route propagation patterns — the hybrid networking foundation tested across architecture design and connectivity scenarios.