Choosing a Backend for Agent Tools That Need Private Networking and VPC Isolation