Best approach to centralize Microsoft Defender for Cloud alerts in Microsoft Sentinel

We have the following setup:

Tenant A

• Microsoft Sentinel is deployed
• Acts as the HQ SOC

Tenant B

• Microsoft Defender for Cloud (MDC) is enabled
• Security alerts are generated from MDC

Operational goal We want to centrally monitor MDC security alerts generated in Tenant B from the SOC in Tenant A. Our primary objective is centralized security alert monitoring and investigation, rather than log retention or redesigning the SIEM architecture.

We are currently considering the following two approaches:

1. Using Azure Lighthouse for cross-tenant security alert monitoring
2. Exporting MDC security alerts via Event Hub and ingesting them into Microsoft Sentinel in Tenant A

From a cost and operational efficiency perspective, which approach is considered best practice and recommended by Microsoft for this use case?

Any guidance on the recommended architecture and typical usage scenarios for each option would be appreciated.