Multiple regions need access to controlled versions of a custom session-host image. Which Azure capability should be evaluated?

1. A workspace application group as the image repository
2. Azure Compute Gallery with suitable image version replication
3. An NSG rule containing the image name
4. A single local screenshot of the image