A healthcare company runs a legacy patient records application that must remain on-premises to satisfy data-residency regulations. However, the company wants to burst its analytics processing to a public cloud provider during month-end reporting when demand spikes, then release those resources afterward. The analytics jobs must securely access the on-premises records during processing. Which cloud deployment model best fits these requirements?