A hospital is legally required to keep patient records on servers it owns and controls. It also wants to host its public appointment-booking site in Azure and to add temporary Azure capacity during the annual flu surge. Which approach matches those requirements?