Question

Your company operates a SaaS analytics platform in a producer VPC. A regulated banking customer wants private, one-way connectivity from their consumer VPC to your service without traversing the public internet, and they must not be able to initiate connections to any other resources in your VPC. You need to publish the service so that only this specific customer's project can create a connection endpoint, and connection requests from any other project must be rejected. Which configuration should you implement on the producer side?

Accepted Answer

Create a Private Service Connect service attachment backed by an internal load balancer, set connection preference to ACCEPT_MANUAL, and add the customer's project to the accept list.

Answer

Create a Private Service Connect service attachment with connection preference ACCEPT_AUTOMATIC so approved customers can connect without manual review.

Answer

Establish VPC Network Peering between the producer and consumer VPCs and use firewall rules to restrict the customer's access to only the load balancer.

Answer

Deploy a Cloud VPN tunnel between the two VPCs and advertise only the load balancer subnet via custom route advertisements.