how to secure the connection between bigquery and cloudsql

[papael]

Hi All,

I'd like to ask, I have a condition that I want to use BQ feature to make some query into my cloudsql instance, but as I know from couple of literature, BQ is a public endpoint which is outside.

I have to open my cloudsql to the internet (port postresql and IP address). One way to secure both connection is restrict the access from BQ toward cloudsql in VPC network rule, but no idea, I dont know bigquery IP address/network.

Is there anyone here to help my case? or if any other best way suggest to me? Thanks in advance!