You need to securely connect to an Azure SQL Database from an on-premises application without exposing the database to the public internet. Which solution should you use?