A customer created several S3 load balancer endpoints, one of which should be accessible only...

StorageGRID load balancer endpoints can be restricted so that only selected tenant accounts are permitted to use a specific endpoint. During endpoint configuration, the administrator uses the Tenant access setting and selects Allow selected tenants, then chooses the backup tenant account. NetApp states that with this setting, only the selected tenant accounts can use the endpoint to access their buckets. This directly satisfies the requirement to dedicate one S3 load balancer endpoint to the internal-backup tenant.

Option A is incorrect because a global binding mode determines where the endpoint is available across eligible Admin and Gateway Node interfaces; it does not restrict access by tenant identity. Option D similarly limits the endpoint to interfaces associated with particular HA groups, which controls network exposure rather than tenant authorization. Option B is not a valid per-tenant isolation mechanism because HTTPS configuration applies to the endpoint connection itself and cannot be selectively disabled for unrelated tenant accounts.

Therefore, the required control is to configure the load balancer endpoint's tenant-access settings and assign access specifically to the backup tenant.

Reference topics: Grid Manager → Load Balancer Endpoints → Tenant Access → Allow Selected Tenants → S3 Client Access Control → Endpoint Binding