You must store a large quantity of archived documents and make them available to employees via the corporate intranet. Employees access the system over a client VPN into a VPC. The data must not be publicly accessible. The documents are copies of physical-media data, request rate will be low, and retrieval speed and availability are not a concern. Which solution provides the required access at the lowest cost?

The correct solution uses Amazon S3 One Zone-IA, which is cost-effective for infrequently accessed, non-critical data where availability and retrieval speed are not concerns. Configuring S3 for website hosting allows easy access via HTTP, and an S3 interface endpoint within the VPC ensures private, secure access from the corporate intranet without traversing the public internet. Restricting bucket access to this endpoint further enhances security. The EC2/EFS and EC2/EBS options introduce unnecessary compute and storage costs for a simple static document archive. EFS One Zone-IA is more expensive than S3 One Zone-IA for this use case, and EBS Cold HDD (sc1) still requires managing an EC2 instance. S3 Glacier Deep Archive is designed for extremely low-cost, long-term archives with retrieval times measured in hours, which is too slow for intranet access, even if retrieval speed isn't a primary concern.