Amazon S3 is not deployed inside a VPC. Resources such as EC2 instances in a VPC can access S3 either through public S3 endpoints using an Internet Gateway or NAT Gateway, or privately through an S3 Gateway VPC Endpoint. The preferred approach is using a VPC Endpoint because it keeps traffic on the AWS network, improves security, and eliminates NAT Gateway costs.