An application launched on Amazon EC2 instances needs to publish personally identifiable information (PII) about customers using Amazon SNS. The application is launched in private subnets within an Amazon VPC.
Which is the MOST secure way to allow the application to access service endpoints in the same region?
A. Use an internet gateway.
B. Use AWS PrivateLink.
C. Use a NAT gateway.
D. Use a proxy instance.