Which solution will meet these requirements?

A company has applications that run on Amazon EC2 instances in a VPC. One of the applications needs to call the Amazon S3 API to store and read objects. According to the company’s security regulations, no traffic from the applications is allowed to travel across the internet.

Which solution will meet these requirements?
A . Configure an S3 interface endpoint.
B . Configure an S3 gateway endpoint.
C . Create an S3 bucket in a private subnet.
D . Create an S3 bucket in the same Region as the EC2 instance.

View Answer

Answer: B

Explanation:

https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html#types-of-vpc-endpoints-for-s3

https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-s3.html