An enterprise organization has 50 different departments, each requiring their own GCP project for billing and resource isolation. However, the central security team mandates that all network traffic must route through a central firewall appliance, and departments must not manage their own external IP addresses. Which network architecture should you implement?

Create a separate VPC in each of the 50 projects and use VPC Network Peering to connect them to a central security project.

Create a Shared VPC in a central host project, attach the 50 department projects as service projects, and manage all subnets and firewalls in the host project.

Deploy Cloud VPN tunnels between all 50 projects to create a hub-and-spoke topology.

Put all resources for all 50 departments into a single GCP project to simplify network management.