Your team member detected a surge in suspicious traffic entering your project's virtual private cloud (VPC) during their night shift. They promptly adjusted the configuration of Cloud Armor to block traffic from specific IP addresses, reducing network activity. However, this action resulted in complaints from an affected customer, leading to penalties for your company. Your team aims to prevent similar incidents in the future following Google-recommended practices. What action should you take?