You are designing a VPC network architecture for your organization using a Network Connectivity Center (NCC) in a hub-and-spoke topology. A single hybrid spoke connects to your on-premises environment. You also need to add a VPC spoke that will route traffic to and from Google Cloud. Your organization has limited private IP address space available in the cloud: 192.168.0.0/20 . The on-prem network uses the IP range 172.16.0.0/16 , connected via Cloud Interconnect in the us-east4 region. You need to enable resources in multiple regions — us-west1 , europe-central1 , and asia-southeast1 —to access on-premises resources. Your goal is to minimize cloud-side IP usage while ensuring connectivity from these regions to on-prem via us-east4 . What is the best solution?