Templates/Hub-Spoke with Transit Gateway
AWS
Networking
advanced

Hub-Spoke with Transit GatewayAWS Architecture Template

Transit Gateway hub interconnecting prod, dev, and shared-services VPCs with centralised egress and DNS.

Prod Spoke VPCDev Spoke VPCShared Services VPCTransit HubPrivate DNSCentral EgressFlow Logs

Why this architecture works

  • Transit Gateway replaces an unmanageable mesh of VPC peerings with one hub and per-spoke route tables
  • Route-table segmentation keeps prod and dev spokes unable to reach each other unless explicitly allowed
  • Centralised NAT egress in one place means one set of egress controls and logs instead of per-VPC sprawl
  • Shared-services VPC hosts DNS and tooling once, consumed by every spoke
  • VPC flow logs to CloudWatch give a single pane for east-west traffic forensics

What's inside (7 resources)

Prod Spoke VPC
aws-vpc
Dev Spoke VPC
aws-vpc
Shared Services VPC
aws-vpc
Transit Hub
aws-transit-gateway
Private DNS
aws-route53
Central Egress
aws-nat-gateway
Flow Logs
aws-cloudwatch

From template to running infrastructure

  1. Open this template in the CloudForge visual designer (free account, no credit card).
  2. Customize resources, names, and connections on the drag-and-drop canvas — or ask Vani, the AI architect, to adapt it.
  3. Generate production-ready Terraform or CloudFormation in one click.
  4. Review the plan diff and security scan, then deploy with human approval.

Related architecture templates