Your organization has two Google Cloud projects, project A and project B. In project A, you have a Pub/Sub topic that receives data from confidential sources. Only the resources in project A should be able to access the data in that topic. You want to ensure that project B and any future project cannot access data in the project A topic. What should you do?

A. Add firewall rules in project A so only traffic from the VPC in project A is permitted. B. Configure VPC Service Controls in the organization with a perimeter around project A. C. Use Identity and Access Management conditions to ensure that only users and service accounts in project A. can access resources in project A. D. Configure VPC Service Controls in the organization with a perimeter around the VPC of project A.