An application running on EC2 instances processes sensitive information stored on Amazon S3

The information is accessed over the Internet. The security team is concerned that the Internet connectivity to Amazon S3 is a security risk.

Which solution will resolve the security concern?

1. Access the data through an Internet Gateway.
2. Access the data through a VPN connection.
3. Access the data through a NAT Gateway.
4. Access the data through a VPC endpoint for Amazon S3.