An application that is hosted on Amazon EC2 instances needs to access an Amazon S3 bucket. Traffic must not traverse the internet. How should a solutions architect configure access to meet these requirements?

• ACreate a private hosted zone by using Amazon Route 53.
• BSet up a gateway VPC endpoint for Amazon S3 in the VPC.
• CConfigure the EC2 instances to use a NAT gateway to access the S3 bucket.
• DEstablish an AWS Site-to-Site VPN connection between the VPC and the S3 bucket.