TechCorp seeks to establish a cloud backup for its on-premises intranet application using AWS Elastic Disaster Recovery, mandating that replication traffic remains private, the application remains inaccessible from the internet, and the backup process doesn't saturate the network. Which combination of steps will meet these requirements? (Choose three.)