A multinational company requires that API traffic between its generative AI applications and foundation models must never traverse the public internet. Which AWS feature supports this requirement?

AWS PrivateLink allows you to establish private connectivity between your VPCs and services hosted by AWS or by third parties, without exposing your data to the public internet. This directly addresses the requirement for API traffic to never traverse the public internet. Amazon Q is a generative AI-powered assistant and does not provide network connectivity. Amazon CloudFront is a content delivery network (CDN) that caches content at edge locations to improve delivery speed, and it operates over the public internet. AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account, not a networking solution.