Your project is using Bigtable to store data that should not be accessed from the public internet under any circumstances, even if the requestor has a valid service account key. You need to secure access to this data. What should you do?

A. Use Identity and Access Management (IAM) for Bigtable access control. B. Use VPC Service Controls to create a trusted network for the Bigtable service. C. Use customer-managed encryption keys (CMEK). D. Use Google Cloud Armor to add IP addresses to an allowlist.