You need to deploy a single stateless web application with a web interface and multiple endpoints. For security reasons, the web application must be reachable from an internal IP address from your company's private VPC and on-premises network. You also need to update the web application multiple times per day with minimal effort and want to manage a minimal amount of cloud infrastructure. What should you do?
Deploying the web application on Cloud Run with Private Service Connect configured is the best solution for meeting the requirements. Cloud Run offers a serverless environment, which minimizes the infrastructure management effort and allows frequent updates. Private Service Connect ensures that the web application is accessible through an internal IP address from your company's private VPC and on-premises network, addressing the security requirement specified. This approach provides the required isolation and security while allowing easy deployment and updates.
Here's why B is the most suitable for the given requirements: Cloud Run: Cloud Run is a fully managed serverless platform for containerized applications. It eliminates the need to manage infrastructure, making it easy to deploy and update your web application multiple times a day with minimal effort. It also scales automatically based on traffic. Private Google Access (PGA): PGA allows resources in a private VPC network (without public IP addresses) to access Google APIs and services, including Cloud Run. This enables you to keep your web application private while still making it accessible from your internal network and on-premises environment.
The most important thing that told me to choose B is the easier upgrade that Cloud Run provides.