Watch this video on YouTube
Your company's cloud security policy mandates that VM instances must not possess an external IP address. To facilitate internet connectivity for updating the VMs, which Google Cloud service should you employ?