A Company with a Single AWS Account Runs Its Internet-Facing

Multiple Choice

A company with a single AWS account runs its internet-facing containerized web application on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The EKS cluster is placed in a private subnet of a VPC. System administrators access the EKS cluster through a bastion host on a public subnet. A new corporate security policy requires the company to avoid the use of bastion hosts. The company also must not allow internet connectivity to the EKS cluster. Which solution meets these requirements MOST cost-effectively?

A) Set up an AWS Direct Connect connection.
B) Create a transit gateway.
C) Establish a VPN connection.
D) Use AWS Storage Gateway.