AWS
Networking
advanced
Hub-Spoke with Transit Gateway — AWS Architecture Template
Transit Gateway hub interconnecting prod, dev, and shared-services VPCs with centralised egress and DNS.
Why this architecture works
- Transit Gateway replaces an unmanageable mesh of VPC peerings with one hub and per-spoke route tables
- Route-table segmentation keeps prod and dev spokes unable to reach each other unless explicitly allowed
- Centralised NAT egress in one place means one set of egress controls and logs instead of per-VPC sprawl
- Shared-services VPC hosts DNS and tooling once, consumed by every spoke
- VPC flow logs to CloudWatch give a single pane for east-west traffic forensics
What's inside (7 resources)
Prod Spoke VPC
aws-vpc
Dev Spoke VPC
aws-vpc
Shared Services VPC
aws-vpc
Transit Hub
aws-transit-gateway
Private DNS
aws-route53
Central Egress
aws-nat-gateway
Flow Logs
aws-cloudwatch
From template to running infrastructure
- Open this template in the CloudForge visual designer (free account, no credit card).
- Customize resources, names, and connections on the drag-and-drop canvas — or ask Vani, the AI architect, to adapt it.
- Generate production-ready Terraform or CloudFormation in one click.
- Review the plan diff and security scan, then deploy with human approval.