Your application has been designed to use Cloud Pub/Sub for interservice communication. You are required to implement a mechanism that ensures only authenticated and authorized services can publish messages to a specific Pub/Sub topic. Which of the following is the best approach to fulfill this requirement?