A customer intends to operate a batch processing system on VMs and store the output files in a Cloud Storage bucket. The networking and security teams have mandated that no VMs should have access to the public internet. How should this requirement be fulfilled?