A client is creating a new API application. The app should only be accessible from other apps that they deploy to Heroku. Also, traffic between the other apps and the API should not transit the public internet.

Which solution should an Architect recommend to meet these requirements?

A. Create the application in a Private Space with default options.

B. Create the application in a Private Space and restrict the application’s set of trusted IP ranges.

C. Create the application with Internal Routing enabled, in a Private Space.
D. Create the application in a Shield Private Space to enforce stricter requirements for TLS termination.

Reference: https://www.accidentaladmintoawesomearch.com/blog/what-you-need-to-know-to-pass-the-heroku-architecture-designer-exam