- Simplest scenario is - public s3 URL access
<img width="983" height="508" alt="Image" src="https://github.com/user-attachments/assets/40fab089-65e4-4055-b3da-a49bf8ff1468"
- The next example is using a private VIF - private vif with interface endpoint
privateVIF
A Datum perspective - a higher level picture would be

- The next possibility is for access through transit gateway for people already deployed with transit GW though this is less desirable
s3accesswithtransitgatewayand Interface endpoint
References: S3accessOver DirectConnect