A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet. However the company’s security policy states that any external service cannot initiate a connection to the EC2 instances. What should a solutions architect recommend to resolve this issue?

• ACreate a NAT gateway and make it the destination of the subnet's route table
• BCreate an internet gateway and make it the destination of the subnet's route table
• CCreate a virtual private gateway and make it the destination of the subnet's route table
• DCreate an egress-only internet gateway and make it the destination of the subnet's route table