like, if you want every deployment of the app to have its own VPC with fully-private IPs and networking, you need to configure the VPC, configure the access point to the VPC (VPN, bastion host, etc), and configure your local machine/pulumi to use it while in the run