A medical records company uses EC2 instances in public subnets to process data stored on Amazon S3, accessing it over the internet. A requirement for private network traffic for file transfers has arisen. What network architecture change should be recommended?