Three spoke VCNs attach to an upgraded DRG. A security team requires selected spoke-to-spoke traffic to traverse a network appliance in a hub. What must the design control?

1. Object Storage lifecycle policies for the hub compartment.
2. Only the names assigned to spoke VCNs.
3. A single broad IAM policy allowing all network operations.
4. Attachment-associated DRG route tables, route distributions, and VCN routes through the inspection path.