Which solution meets this requirement?

A company that recently started using AWS establishes a Site-to-Site VPN between its on-premises data center and AWS. The company’s security mandate states that traffic originating from on premises should stay within the company’s private IP space when communicating with an Amazon Elastic Container Service (Amazon ECS) cluster that is hosting a sample web application.

Which solution meets this requirement?
A . Configure a gateway endpoint for Amazon EC
B . Modify the route table to include an entry pointing to the ECS cluster.
C . Create a Network Load Balancer and AWS PrivateLink endpoint for Amazon ECS in the same VPC that is hosting the ECS cluster.
D . Create a Network Load Balancer in one VPC and an AWS PrivateLink endpoint for
Amazon ECS in another VP
E . Connect the two VPCs by using VPC peering.
F . Configure an Amazon Route 53 record with Amazon ECS as the target. Apply a server certificate to Route 53 from AWS Certificate Manager (ACM) for SSL offloading.

Answer: C