Connecting a deployment to customer or cloud network resources through a controlled virtual private cloud — typically needed when the agent must reach internal APIs not exposed to the internet.