A company runs an application on Amazon EC2 instances in a private subnet.The application needs to store and retrieve data in Amazon S3 buckets.According to regulatory requirements, the data must not travel across the public internet.
What should a solutions architect do to meet these requirements MOST cost-effectively?
Deploy a NAT gateway to access the S3 buckets.
Deploy AWS Storage Gateway to access the S3 buckets.
Deploy an S3 interface endpoint to access the S3 buckets.
Deploy an S3 gateway endpoint to access the S3 buckets.
Explanations:
A NAT gateway would allow private instances to access S3, but it routes traffic over the internet, incurring costs.
AWS Storage Gateway is designed for hybrid storage use cases, not for direct access to S3 from EC2 in a VPC.
An S3 interface endpoint allows private access to S3, but it incurs higher costs due to data processing charges.
An S3 gateway endpoint enables private, cost-effective access to S3 without using the public internet.
I map out that the answer is:
Deploy an S3 gateway endpoint to access the S3 buckets.