Your organization frequently executes numerous builds on Google Cloud. To enhance security, you need to ensure that virtual machines (VMs) do not have public IP addresses and are safeguarded against data exfiltration. What is the best practice recommended by Google to develop a scalable, customizable, and easily managed solution for your builds?