Your company's cloud security policy requires that VM instances must not have external IP addresses. You need to identify the Google Cloud service that enables these VMs to access the internet for updates. Which service should you use?