Unable to spin up an instance with only an internal IP

I am creating a bastion host on GCP. The external instance works great, however the internal instance is being implemented as expected.

Is there a way to spin up an instance with Terraform, where the instance only has an internal IP and no external IP configured?

This is accomplished by omitting network_interface.access_config on the google_compute_instance resource.

resource "google_compute_instance" "main" {
  ...

  network_interface {
    network    = ...
    subnetwork = ...
    
    // omit access_config {} entirely
  }
}