You have multiple Compute Engine instances in a private subnet. How can you enable these instances to access Google Cloud services, such as Cloud Storage, without using the public internet?