Your company has a support ticketing solution that uses App Engine Standard. The project that contains the App Engine application already has a Virtual Private Cloud (VPC) network fully connected to the company's on-premises environment through a Cloud VPN tunnel. You want to enable the App Engine application to communicate with a database that is running in the company's on-premises environment. What should you do?

Serverless VPC Access allows your App Engine Standard environment to connect directly to your VPC network using an internal IP address. This is crucial for reaching resources in your on-premises environment via the existing Cloud VPN tunnel, as App Engine Standard instances typically run in Google's managed infrastructure and don't directly inherit VPC network configurations. Private Google Access is for virtual machine instances in your VPC to reach Google APIs and services using internal IP addresses, not for serverless environments to reach your on-premises network. Configuring it for "on-premises hosts only" is not a standard Google Cloud networking feature. Private Services Access is used for connecting your VPC to Google-managed services like Cloud SQL, not for serverless applications to reach your on-premises network.