A company is moving its data and applications to AWS during a multiyear migration project.The company wants to securely access data on Amazon S3 from the company’s AWS Region and from the company’s on-premises location.The data must not traverse the internet.The company has established an AWS Direct Connect connection between its Region and its on-premises location.
Which solution will meet these requirements?
Create gateway endpoints for Amazon S3. Use the gateway endpoints to securely access the data from the Region and the on-premises location.
Create a gateway in AWS Transit Gateway to access Amazon S3 securely from the Region and the on-premises location.
Create interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location.
Use an AWS Key Management Service (AWS KMS) key to access the data securely from the Region and the on-premises location.
I estimate that the answer is:
Create interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location.