Which policy type must be applied on a WAN Edge to configure an ACL for traffic arriving from a service-side VPN with circuit ID 123456789?

A local data policy is applied directly to a specific WAN Edge router and is used to control traffic traversing that device. Since the ACL needs to be configured for traffic arriving from a service-side VPN on a particular WAN Edge, a local data policy is the appropriate choice. Central data policies are configured on vSmart controllers and affect traffic flow across the entire SD-WAN fabric, not specific ingress points on a single device. App-aware policies are a type of central data policy focused on application-specific routing. Central control policies are used for routing and topology decisions, not for filtering traffic with ACLs.