Your organization processes sensitive customer data and must comply with a policy requiring all Google Cloud resources to reside in predefined regions. You need to implement a solution to enforce this requirement at scale across all Google Cloud projects within your organization. What should you do?