I created a new Debian bookworm instance (without IP forwarding).
I gave attached it to a static IP address from Google.
I also enabled HTTPS at creation time (the checkbox).
When I look at the rule at
https://console.cloud.google.com/net-security/firewall-manager/firewall-policies/details/default-allow-https
I can see it is setup and applicable to my Debian instance, at the bottom of that page.
But for some reason I am unable to reach the server through port 443 HTTPS