Your company has a set of instances hosted in a private subnet. These instances need to make calls to the Simple Storage Service. You have setup the Endpoint but are still not able to access the S3 buckets from the instances in the private subnet. Which of the following could be issues for the access?
Choose 2 answers from the options given below

Answer options:

A.You should be using an interface instead of a gateway for accessing the S3 service.
B.The prefix for the endpoint is not attached to the Route table
C.The prefix for the endpoint is not attached to the Security Group
D.Bucket policy attached to S3 buckets doesn`t allow access to VPC endpoint

Answer - B and D
The prefix for the gateway endpoint needs to be added to the Route table
The below diagram from the AWS Documentation shows the design of an endpoint
Option A is incorrect because you should use a gateway for S3
Option C is incorrect because the prefix should be attached to the Route table and not the Security Group.
For more information on VPC gateway endpoints , please visit the below URL
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpce-gateway.html