Your company runs a hub-spoke topology in Azure. You must enable virtual network flow logs on a spoke VNet named spoke-prod-vnet to capture traffic metadata for compliance auditing and later analysis with Traffic Analytics. Before you can create the flow log resource, which prerequisite must be in place in the same region as the VNet?