Instances in private subnets only need to reach Amazon S3 and Amazon DynamoDB, but the team is paying significant NAT gateway data-processing charges for that traffic. What change reduces cost the most?

Pick an option to reveal the answer.