You are developing a web application accessible over both HTTP and HTTPS, hosted on Compute Engine instances. Periodically, you'll require SSH access from your remote laptop to conduct maintenance on these instances. How should you configure the instances while ensuring compliance with Google-recommended best practices?