A network architect is deploying Cisco Catalyst SD-WAN Cloud OnRamp for Multicloud to connect several branch sites to workloads running in AWS. The branches are grouped by geography, and each geographic group must reach the closest AWS region's host VPCs with the lowest possible latency. In the Cloud OnRamp workflow, which construct is used to associate specific branch VPN segments and their sites with the cloud gateway serving a chosen AWS region?