Your organization has a single project that contains multiple Virtual Private Clouds (VPCs). You need to secure API access to your Cloud Storage buckets and BigQuery datasets by allowing API access only from resources in your corporate public networks. What should you do?

A. Create an access context policy that allows your VPC and corporate public network IP ranges, and then attach the policy to Cloud Storage and BigQuery. B. Create a VPC Service Controls perimeter for your project with an access context policy that allows your corporate public network IP ranges. C. Create a firewall rule to block API access to Cloud Storage and BigQuery from unauthorized networks. D. Create a VPC Service Controls perimeter for each VPC with an access context policy that allows your corporate public network IP ranges.