In this section, you’ll create a second transit gateway route table in the network-prod
AWS account so that you have control over which of your VPCs can access the site-to-site VPN connection and the infrastructure shared services VPC that you’ll set up in a later section. You’ll associate your workload hosting VPCs with this second route table.
Create a transit gateway route table for your workload hosting VPCs:
network-prod
AWS accountManagement console
associated with the AWSAdministratorAccess
role.VPC
Transit Gateway Route Tables
Create Transit Gateway Route Table
Field | Recommendation |
---|---|
Name |
infra-workloads-vpcs |
Transit Gateway ID |
Select your transit gateway from the list |
Create Transit Gateway Route Table
infra-workloads-vpcs
route tableavailable
, select the Associations
tab. You might have to refresh the page to see the state change.Create association
Field | Recommendation |
---|---|
Choose attachment to associate |
Choose the transit gateway attachment id for the common team development VPC attachment. For example, infra-dev-shared |
Create association
Now that you’ve associated the team development VPC with the route table, you need to enable transit gateway to route traffic from the team development VPC to your on-premises network via your site-to-site VPN connection. You do this by adding a propagation to your route table. The propagation will propagate the routing information associated with the site-to-site VPN connection attachment to this route table.
associated
, select the Propagations
tab. You might have to refresh the page to see the state change.Create propagation
Field | Recommendation |
---|---|
Choose attachment to propogate |
Select the transit gateway attachment id for the site-to-site VPN attachment |
Create propagation
Routes
tab.Routes
section. When using BGP, this routing information will be dynamically updated as you modify your on-premises routing information via your customer gateway.Adding shared infrastructure services VPC: Later, when you create your shared infrastructure services VPC, you’ll attach that VPC to the transit gateway and add a propagation for the attachment to this route table. This propagation will enable traffic from the workload VPCs to be routed the shared infrastructure services VPC.