A single VPC uses Cloud Interconnect for on‑prem access. You must ensure Cloud Storage traffic goes over Interconnect while other Google APIs/services use the public internet. What should you use?

Private Service Connect (PSC) allows you to privately access Google APIs and services, including Cloud Storage, from your VPC network or on-premises network via Cloud Interconnect. This ensures Cloud Storage traffic remains on the private network. For other Google APIs and services, using their default public domains means traffic will traverse the public internet, fulfilling the requirement. The other options are incorrect because: Using default public domains for all services would send Cloud Storage traffic over the internet, not Interconnect. Private Google Access (PGA) with restricted.googleapis.com or private.googleapis.com routes traffic to Google services over Google's private network, but it doesn't offer the granular control to direct only Cloud Storage over Interconnect while forcing others to the public internet. PGA routes all enabled services through the private VIPs.