A client wants to deconstruct a monolithic app into a collection of smaller apps which should be able to send HTTP requests to each other. The smaller apps should not be publicly accessible on the internet. Which Heroku Enterprise features should an Architect recommend to enable this architecture?

Universal Containers (UC) has configured SSO for their Heroku EnterpriseTeam using an identity provider (IdP).
When a new employee joins the company, how should their Heroku account be created?

The Private Spacesfeature can be useful if you need to:

Which three actions can a user perform on an app in a Heroku Enterprise Team, if that user has been granted only the "deploy" permission for that app? Choose 3 answers.

Universal Containers needs to write their Heroku application's logs to twodestinations: an on-premise Syslog log server and a cloud analytics provider that ingests logs using an HTTPS endpoint.
What should an Architect recommend in this scenario?