You need to test security policy changes for a public Google Cloud web application before enforcing them to protect against common attacks. Which service should you use for this validation?