A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not travel across the internet. Which combination of steps should the solutions architect take to meet this requirement? (Choose two.)
ACreate a route table entry for the endpoint.
BCreate a gateway endpoint for DynamoDB.
CCreate an interface endpoint for Amazon EC2.
DCreate an elastic network interface for the endpoint in each of the subnets of the VPC.
ECreate a security group entry in the endpoint's security group to provide access.