A workload writes large amounts of private S3 traffic through NAT. It runs in a Region where an S3 gateway endpoint is supported. Which change should be evaluated to reduce unnecessary NAT processing?

1. Increase NAT gateway capacity without changing the S3 route.
2. Add a random CNAME for S3 and keep the same default route.
3. Associate an S3 gateway endpoint with the relevant subnet route tables and validate access policies.
4. Make the bucket public so private instances no longer need a route.