VPC Gateway Endpoints for Private S3 Bucket Connections
In this kind of scenario, we could use a NAT gateway to access an S3 bucket over the public internet. However, this is not the most secure or performant solution. Instead, we can use a VPC endpoint to access S3 over AWS's private network.
With an endpoint inside the VPC and routing to that endpoint, traffic that is destined for S3 would not leave the network.
For more information about how to use VPC endpoints to access S3, see Gateway endpoints for Amazon S3.