Your organization hosts a 3-tier web application within the same Google Cloud Virtual Private Cloud (VPC). Each tier (web, API, and database) scales independently. Network traffic is intended to flow from the web tier to the API tier and then to the database tier. However, traffic should not traverse directly between the web and database tiers. How should you configure the network with minimal steps?