An application runs on an Amazon EC2 instance in a VPC. The application processes logs that are stored in an Amazon S3 bucket. The EC2 instance must access the S3 bucket without any Internet connectivity. Which solution provides private network connectivity to Amazon S3?

A gateway VPC endpoint for Amazon S3 allows EC2 instances within a VPC to privately access S3 buckets without traversing the public internet. This ensures secure and direct connectivity. Streaming logs to CloudWatch Logs and then exporting to S3 still involves S3 access, but doesn't directly address the private connectivity requirement for the EC2 instance's initial access. An instance profile grants permissions but doesn't establish private network connectivity. Creating an API Gateway API with a private link is for exposing services via an API, not for direct private access from an EC2 instance to S3.