Restrict access from cloud network to local network

[Pratik-Poojary]

We have a deployment of LAN-to-LAN VPN (Using L3 IP Routing)
VPN server is deployed on cloud network.
VPN Bridge is deployed on the local network.
While this allows for communication between the two networks what we needed, but it creates a potential vulnerability in the event of a hack on the cloud network.
If an attacker gains access to the cloud network, they can use this link to gain access to the local network.
How can we restrict the access from the cloud network with network address 10.100.1.0/24 to the local network with the network address 192.168.0.0/16