You are in the process of migrating your on-premises data warehouse to BigQuery . One of your key data sources is a MySQL database hosted in your on-premises data center , which does not have any public IP access . To maintain security and privacy , you want to ensure that data ingestion into BigQuery avoids public internet exposure . Which approach should you take to meet these security and connectivity requirements?