A Company Has an Application That Runs on Amazon EC2

A company has an application that runs on Amazon EC2 instances within a private subnet in a VPC. The instances access data in an Amazon S3 bucket in the same AWS Region. The VPC contains a NAT gateway in a public subnet to access the S3 bucket. The company wants to reduce costs by replacing the NAT gateway without compromising security or redundancy. Which solution meets these requirements?

A) Replace the NAT gateway with a NAT instance.
B) Replace the NAT gateway with an internet gateway.
C) Replace the NAT gateway with a gateway VPC endpoint.
D) Replace the NAT gateway with an AWS Direct Connect connection.