A Cloud Run service can overwhelm its database during a traffic surge. The team wants an upper bound on service instance growth and accepts possible queuing or errors at that bound. Which approach best fits?

1. Configure revision traffic splitting for a canary rollout.
2. Set an appropriate maximum instance count and validate load behavior.
3. Configure an appropriate minimum instance count.
4. Route traffic back to the known-good revision.