Create an S3 access point for each application within the AWS account that owns the S3 bucket. Configure each access point to restrict access to the application’s VPC. Modify the bucket policy to enforce access through an access point.

Establish an interface endpoint for Amazon S3 in each application's VPC. Adjust the endpoint policy to permit access to an S3 access point. Set up a VPC gateway attachment for the S3 endpoint.

Set up a gateway endpoint for Amazon S3 in each application's VPC. Customize the endpoint policy to grant access to an S3 access point. Define the route table used to access the access point.

Generate an S3 access point for each application in every AWS account and link the access points to the S3 bucket. Configure each access point to limit access to the application's VPC. Amend the bucket policy to mandate access through an access point.

Create a gateway endpoint for Amazon S3 in the VPC of the data lake. Apply an endpoint policy to allow access to the S3 bucket. Specify the route table used to access the bucket.