A company is designing a new multi-tier web application that consists of the following components: • Web and application servers that run on Amazon EC2 instances as part of Auto Scaling groups • An Amazon RDS DB instance for data storage A solutions architect needs to limit access to the application servers so that only the web servers can access them. Which solution will meet these requirements?

• ADeploy AWS PrivateLink in front of the application servers. Configure the network ACL to allow only the web servers to access the application servers.
• BDeploy a VPC endpoint in front of the application servers. Configure the security group to allow only the web servers to access the application servers.
• CDeploy a Network Load Balancer with a target group that contains the application servers' Auto Scaling group. Configure the network ACL to allow only the web servers to access the application servers.
• DDeploy an Application Load Balancer with a target group that contains the application servers' Auto Scaling group. Configure the security group to allow only the web servers to access the application servers.