As a member of your company's security team gcp video

Full Certification Question

As a member of your company's security team, you've been tasked with minimizing the external attack surface of your Linux bastion host by removing all public IP addresses. However, Site Reliability Engineers (SREs) still need access to the bastion host from public locations to reach the internal VPC while off-site. How should you facilitate this access?