A SysOps Administrator needs to ensure that EC2 instances in a private subnet can access S3 without traversing the public internet. Which solution achieves this?
-
A
Create a NAT Gateway and add a route to S3 in the route table
-
B
Create a VPC Gateway Endpoint for S3 and update the route table
-
C
Enable VPC Flow Logs and add an S3 bucket policy
-
D
Attach an IAM role with S3 access to the EC2 instances only