A company has an AWS account used for software engineering. The AWS account has access to the company’s on-premises data center through a pair of AWS Direct Connect connections. All non-VPC traffic routes to the virtual private gateway. A development team recently created an AWS Lambda function through the console. The development team needs to allow the function to access a database that runs in a private subnet in the company’s data center. Which solution will meet these requirements?

1. Configure the Lambda function to run in the VPC with the appropriate security group.
2. Set up a VPN connection from AWS to the data center. Route the traffic from the Lambda function through the VPN.
3. Update the route tables in the VPC to allow the Lambda function to access the on-premises data center through Direct Connect.
4. Create an Elastic IP address. Configure the Lambda function to send traffic through the Elastic IP address without an elastic network interface.