An AI application must call Bedrock from private subnets without public internet egress. Which approach supplies the private service path?

1. Use the appropriate Bedrock interface VPC endpoints with scoped security groups, DNS, and IAM permissions.
2. Use an S3 gateway endpoint as a universal Bedrock runtime endpoint.
3. Use a private-looking DNS alias for the public endpoint and no endpoint service.
4. Remove IAM authorization because the endpoint has a private IP.