How should a solutions architect configure access?

A company’s application hosted on Amazon EC2 instances needs to access an Amazon S3 bucket. Due to data sensitivity, traffic cannot traverse the internet.

How should a solutions architect configure access?
A . Create a private hosted zone using Amazon Route 53.
B . Configure a VPC gateway endpoint for Amazon S3 in the VP
D . Configure AWS PrivateLink between the EC2 instance and the S3 bucket.
E . Set up a site-to-site VPN connection between the VPC and the S3 bucket.

Answer: B