A network team wants centrally governed inter-Region and branch connectivity with policy-defined segments across a large global organization. Which managed service most directly fits this operating model?

1. AWS Cloud WAN with a core network policy and segments.
2. A regional NAT gateway with network ACLs for each branch.
3. One VPC peering connection shared automatically across all Regions.
4. An S3 Multi-Region Access Point as the general transit router.