A manufacturing company is storing data from its operational systems in Amazon S3. The company's business analysts need to perform one-time queries of the data in Amazon S3 with Amazon Athena. The company needs to access the Athena network from the on-premises network by using a JDBC connection. The company has created a VPC Security policies mandate that requests to AWS services cannot traverse the Internet.
Which combination of steps should a data analytics specialist take to meet these requirements? (Choose two.)

A. Establish an AWS Direct Connect connection between the on-premises network and the VPC.
B. Configure the JDBC connection to connect to Athena through Amazon API Gateway.
C. Configure the JDBC connection to use a gateway VPC endpoint for Amazon S3.
D. Configure the JDBC connection to use an interface VPC endpoint for Athena.
E. Deploy Athena within a private subnet.