Hub-and-spoke network design with a central Hub VPC containing Firewall, DNS, and Shared Services connected to four Spoke VPCs (Production, Staging, Development, DMZ) via a Transit Gateway for centralized traffic management.