You are designing a secure network architecture with strict separation between development and production environments, ensuring no network traffic can flow between them. The network team requires a single central entry point from the on-premises environment to the cloud network. What approach should you take?