A user needs to put sensitive data in an Amazon S3 bucket that can be accessed through an S3 VPC endpoint only. The user must en

sure that resources in the VPC can only access the single S3 bucket.

Which combination of actions will meet the requirements? (select TWO.)

A. Configure the bucket policy to only allow access through the S3 Private Endpoint.

B. Modify the VPC endpoint

policy on the bucket to only allow the VPC to access it.

C. Modify the VPC peering configuration to only allow access to the S3 private Endpoint.

D. Configure the VPC endpoint policy to only allow the VPC to access the specific S3 bucket.

E. Configure the

IAM policy attached to the S3 bucket to only allow access from the specific VPC.

Reference: