A private subnet contains IPv4 instances without public addresses. They need outbound connections to public package repositories. What should provide the egress path?

1. A NAT gateway and the appropriate route and egress rules.
2. A local peering gateway with no peer.
3. An internet gateway alone with no public addresses.
4. A service gateway route for every internet prefix.