A company has implemented a software-defined WAN (SD-WAN) solution to connect all its offices. As the company migrates workloads to AWS, it needs to extend its SD-WAN solution to enable connectivity to these workloads.

A network engineer intends to use AWS Transit Gateway Connect and deploy two SD-WAN virtual appliances to facilitate this connectivity. However, company policies mandate that only one SD-WAN virtual appliance can manage traffic from AWS workloads at any given time.

How should the network engineer set up routing to comply with these requirements?