An application runs on Amazon EC2 instances in private subnets. The application needs to access an Amazon DynamoDB table. What is the MOST secure way to access the table while ensuring that the traffic does not leave the AWS network?

• AUse a VPC endpoint for DynamoDB.
• BUse a NAT gateway in a public subnet.
• CUse a NAT instance in a private subnet.
• DUse the internet gateway attached to the VPC.