The configuration change required to allow direct internet access at the branch site for YouTube traffic would be to add a NAT action for the matching YouTube traffic in the data policy.
In the provided configurations, the configuration shown in chosen option has the correct modification. It includes the following line under the action section: nat vpn 0.
This ensures that the matching YouTube traffic is NATed through VPN 0, which is typically used for direct internet access in Cisco SD-WAN.