You have deployed a managed Microsoft SQL Server instance in Google Cloud SQL. The instance needs to be accessible from your on-premises network which is connected to Google Cloud through Cloud VPN. However, you need to ensure that the SQL Server instance is not exposed to the internet. Which of the following should you do?