An organization wants a network design where developers each work in their own project with separate billing and quotas, but all connect to a centrally managed private network where connectivity routes and firewalls are administered in one place. Which VPC capability satisfies this requirement?