Promote the internal IP addresses to static assignments for all database VMs.

Create a firewall rule to allow only traffic to the IP addresses allocated to your database VMs.

Define a maintenance window to shut down the database VMs one at a time, promote the internal IP address to a static assignment, and restart the VM.

Define an organization policy to allow only statically allocated IP addresses for VMs. Ensure the prefix matches your database VMs.