A global company wants centrally governed branch and multi-Region VPC connectivity using network segments and policy-driven topology. Which managed service should it evaluate first?

1. One regional NAT gateway shared as the global WAN controller.
2. AWS Cloud WAN with core network policies and segments.
3. CloudFront cache policies for all arbitrary IP traffic.
4. A full mesh of manually maintained peering connections as the only possible design.