Central networking should remain in the Shared VPC host project while application ownership remains separate. Which plan is best?

1. Copy the host network's CIDR into unconnected VPCs and assume connectivity.
2. Store all service-project credentials in a public DNS TXT record.
3. Keep Shared VPC and ODB network administration centralized and delegate supported subnet use.
4. Place IAM groups inside database client subnet CIDRs.