Using presigned URL for S3 (without internet)

Hello! AWS resources in a VPC could access S3 endpoints via an S3 VPC Gateway endpoint https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html. If the intent is for on-premises resources to access S3 via Direct Connect, you can do so using a Direct Connect public VIF or private VIF via an S3 VPC interface endpoint. https://repost.aws/knowledge-center/s3-bucket-access-direct-connect

In addition to the other suggestions, you might also use a Direct Connect Public VIF: https://www.youtube.com/watch?v=X_4ekgRc4C8&t=328s