A multinational enterprise needs to ensure that their data ingestion into AWS is compliant with data sovereignty laws. Which service should they use to control the location of data ingestion?