A client wants to use Heroku to build a data bridge between Salesforce and Google Cloud Platform (GCP).

Which combination of Heroku features should an Architect recommend to secure the connection between Heroku and GCP?

A. Heroku Shield Private Spaces and Heroku Shield Connect

B. Heroku Private Spaces and Private Space VPN Connections
C. Heroku Private Spaces and Private Space Peering
D. Heroku Shield Private Spaces and Internal Routing