A database should be reachable only through an approved private network path. Which connectivity configuration is most relevant?

1. An IAM user name used as a network firewall
2. A publicly reachable endpoint solely because its name is obscure
3. A private endpoint with the required network access controls
4. A budget alert as the sole connectivity control