You are designing your organization’s network architecture to allow clients to access specific Google APIs, including Cloud Storage and BigQuery. The solution must ensure that traffic does not traverse the public internet, and it should be cloud-native with minimal configuration steps. What should you do?