Question

A large enterprise has separate teams managing distinct application projects, but a central network team must retain full control over all subnets, firewall rules, and routing. Application teams should be able to deploy Compute Engine VMs into predefined subnets without the ability to modify network configuration. Which Google Cloud networking design best meets these requirements?

Accepted Answer

Create a Shared VPC with the network team's project as the host project and each application project as a service project, delegating specific subnets to each team.

Answer

Create a separate VPC in each application project and connect them all using VPC Network Peering.

Answer

Create one VPC in a central project and grant application teams Owner role on that project so they can deploy VMs.

Answer

Create individual VPCs per team and use Cloud VPN tunnels between each project to enable connectivity.