What should the SysOps Administrator do to meet this requirement?

A company is storing monthly reports on Amazon S3. The company’s security requirement states that traffic from the client VPC to Amazon S3 cannot traverse the internet.

What should the SysOps Administrator do to meet this requirement?
A . Use AWS Direct Connect and a public virtual interface to connect to Amazon S3.
B . Use a managed NAT gateway to connect to Amazon S3.
C . Deploy a VPC endpoint to connect to Amazon S3.
D . Deploy an internet gateway to connect to Amazon S3.

Answer: C