You have a Cloud Run service that needs to connect to a Cloud SQL instance in a different project. You provisioned the Cloud Run service account with the Cloud SQL Client IAM role on the project that is hosting Cloud SQL. However, when you test the connection, the connection fails. You want to fix the connection failure while following Google-recommended practices. What should you do?

A. Add the cloudsql.instances.connect IAM permission to the Cloud Run service account. B. Request additional API quota for Cloud SQL Auth Proxy, C. Enable the Cloud SQL Admin API in both projects. D. Migrate the Cloud SQL instance into the same project as the Cloud Run service.