Automate the process of setting up and managing transit networks in multi-account AWS environments.
Overview
The Network Orchestration for AWS Transit Gateway solution automates the process of setting up and managing transit networks in distributed AWS environments. This solution allows customers to visualize and monitor their global network from a single dashboard rather than toggling between Regions from the AWS Console. It creates a web interface to help control, audit, and approve transit network changes.
Benefits
Cross-account and cross-Region capability
Change management
Use the web user interface to either accept or reject connectivity requests when manual approval is required.
Web user interface
Deploy a web user interface to control, audit, and approve transit network changes.
Compliance
Use rules to automatically accept or reject network changes based on the Organization Unit (OU).
How it works
You can automatically deploy this architecture using the implementation guide and the accompanying AWS CloudFormation templates.
Step 1
This template deploys an Amazon EventBridge rule that monitors specific VPC and subnet tag changes.
An EventBridge rule in the spoke account sends the tags to the EventBridge bus in the hub account.
The rules associated with the EventBridge bus invoke an AWS Lambda function to start the solution workflow. For more information about workflows, refer to Architecture details.
AWS Step Functions (solution state machine) processes network requests from the spoke accounts.
The state machine workflow attaches a VPC to the transit gateway.
The state machine workflow updates the VPC route table associated with the tagged subnet.
The state machine workflow updates the transit gateway route table with association and propagation changes.
(Optional) The state machine workflow updates the attachment name with the VPC name and the Organizational Unit (OU) name for the spoke account (retrieved from the Org Management account).
The solution updates Amazon DynamoDB with the information extracted from the event and resources created, updated, or deleted in the workflow.
Deploy with confidence
We'll walk you through it
Get started fast. Read the implementation guide for deployment steps, architecture details, cost information, and customization options.Open guide
Let's make it happen
Ready to deploy? Open the CloudFormation template in the AWS Console to begin setting up the infrastructure you need. You'll be prompted to access your AWS account if you haven't yet logged in.Launch in the AWS Console
Deployment options
Implementation guide
Follow the implementation guide for step-by-step actions to deploy this AWS Solution.
Source code
The source code for this AWS Solution is available in GitHub.
CloudFormation templates
View or modify the CloudFormation template to customize your deployment.