A DevOps engineer is currently running a container$-$based workload on$-$premises The engineer wants to move the application to AWS, but needs to keep the on$-$premises solution active because not all APIs will move at the same time. The tra$$c between AWS and the on$-$premises network should be secure and encrypted at all times. Low management overload is also a requirement.Which combination of actions will meet these criteria? $($Select THREE.$)$

A $.$ Create a Network Load Balancer and. for each service, create a listener that points to the correct set of containers either in AWS or on$-$premises.

B $.$ Create an Application Load Balancer and, for each service, create a listener that points to the correct set of containers either in AWS or on$-$premises.

C $.$ Host the AWS containers in Amazon ECS with an EC$2$ launch type.

D $.$ Host the AWS containers in Amazon ECS with a Fargate launch type

E $.$ Use Amazon API Gateway to front the workload, and create a VPC link so API Gateway can forward API calls to the on$-$premises network through a VPN connection.

F $.$ Use Amazon API Gateway to front the workload, and set up public endpoints for the on$-$premises APIs so API Gateway can access them.