You need to Configure Private Google Access so your instances can reach the Google API's.
If you have the default egress firewall rule, you should not have any issue after configuring it; but if you have hardened the egress, you will need to configure the firewall rules as described in this document.