Just because an application is running in the cloud, doesn’t mean you want it to be accessible to the outside world. Cloud NAT, Google Cloud’s managed Network Address Translation service, enables you to provision your application instances without public IP addresses while also allowing them to access the internet — for updates, patching, config management, and more — in a controlled and efficient manner.