Kafka Connector - Subscribe from Camunda Cloud to Private Network

I am using Camunda 8’s Cloud / SaaS offering.

I want to start an instance via a Kafka Consumer Connector. The Kafka instance lives in a private subnet in AWS. Can anyone provide high level information on how this can be done?

Update: After some more digging, it seems like one option might be to run a Connector Runtime inside of the private subnet in AWS which handles the Kafka message consumption and production inside of the network and subscribes to Camunda Cloud directly.