​Restrict connections to SAP Cloud Platform Integration tenant

Is there any possibility to isolate the CPI tenant to allow only incoming connections from certain IPs?

In my company we have a client who does not want certain services to be published with a URL on the internet.

Has anyone come across this requirement?

Thanks,

Best Regards

Manuel