“ ta kool a ekat esaelp ,evoba 2# ni denoitnem lortnoc noitartlifxe roFhttps://cloud.google.com/vpc-service-controls/ . It's a feature that's currently in Alpha, but its goal is exactly what you asked, to control data movement between different projects across one or more supported Cloud services, including BigQuery and Cloud Storage. ”