The CE support something like Layer 3 VPN between sites with the global network feature (probably mp-bgp with MPLS is used by XC in the background) but why not also Layer 2 where 1 VM in Azure for example sees a VM in AWS like layer 2 connected through the deployed CE ?