A cloud engineer is deploying a new Cloud SQL instance that must be accessible exclusively through private IP addresses within an existing Virtual Private Cloud (VPC) network. Which TWO actions must be completed to successfully configure private IP connectivity for this database instance? (Select TWO answers.)
- Establish a Private Services Access connection by allocating an internal IP range and peering the VPC network with Google Services.Answer
- Specify the target VPC network using the --network flag when creating the instance with gcloud CLI.Answer
- CAdd a public Authorized Network entry set to 0.0.0.0/0 to allow internal VPC subnet routing.
- DAttach an External HTTP(S) Load Balancer directly to the database network interface to route internal private traffic.
Answer
To configure private IP connectivity for Cloud SQL, you must establish a Private Services Access connection (VPC network peering) in your VPC and supply the --network flag referencing your VPC network during instance creation.
Deploying a Cloud SQL instance with private IP requires Private Services Access (which establishes VPC network peering between your VPC and Google's service producer network) and supplying the target VPC network via the --network flag during deployment so an internal IP can be assigned.
Step-by-Step Solution
Key Concept
Cloud SQL Private IP and Private Services Access Configuration