Question

A company runs EC2 instances in a private subnet that has no NAT gateway and no internet gateway route. The instances must upload processed files to an Amazon S3 bucket in the same Region. A SysOps administrator needs to enable this connectivity while keeping traffic entirely on the AWS network and avoiding additional per-hour data processing charges. Which solution meets these requirements?

Accepted Answer

Create a gateway VPC endpoint for Amazon S3 and add its prefix list to the private subnet's route table.

Answer

Deploy a NAT gateway in a public subnet and add a default route from the private subnet to the NAT gateway.

Answer

Create an interface VPC endpoint (AWS PrivateLink) for Amazon S3 and update the route table to point to it.

Answer

Attach an internet gateway to the VPC and assign Elastic IP addresses to the private instances.