A company migrates critical workloads to a hybrid cloud. Network engineers propose extending internal VLANs into the cloud for simplicity. Security is concerned about lateral movement and unclear trust boundaries, while leadership wants minimal redesign.
What is the MOST appropriate network architecture decision to make FIRST?