A large manufacturing enterprise has a legacy inventory management system running on-premises that needs to process quality control images uploaded to Cloud Storage. The company requires a serverless solution that automatically triggers when new images are uploaded, processes them for defect detection, and stores results in BigQuery. The solution must comply with their security policy requiring least privilege access and minimize operational overhead. What should they implement?