Creating a Transit Gateway and related resources

To create a Transit Gateway and related resources:

1. Create a Transit Gateway (TGW):
   1. In the AWS console, open the VPC service.
   2. Select Transit Gateways, then click the Create Transit Gateway button.
   3. In the Name tag field, enter the desired name.
   4. Deselect Default route table association and Default route table propagation to prevent undesired association into the security route.
   5. Configure other fields as desired, then click Create.
   6. Wait for the Transit Gateway state to change from Pending to Available before proceeding.
2. Create two TGW route tables: one for the security VPC and another for the spokes:
   1. In the AWS console, open the VPC service.
   2. Select Transit Gateway Route Tables, then click the Create Transit Gateway Route Table button.
   3. In the Name tag field, enter the desired name.
   4. From the Transit Gateway ID dropdown list, select the Transit Gateway ID.
   5. Click Create.
   6. Repeat the process for the spoke route table.
3. Create three TGW attachments, one for each VPC:
   1. In the AWS console, open the VPC service.
   2. Select Transit Gateway Attachments, then click the Create Transit Gateway Attachment button.
   3. From the Transit Gateway ID dropdown list, select the Transit Gateway ID.
   4. In the Attachment type field, select VPC.
   5. In the Attachment name tag field, enter the desired name.
   6. In the VPC ID field, enter the security VPC ID for the first attachment. This is TGW_Sec_VPC_Attachment in the screenshot.
   7. For Subnet IDs, specify both AZs and select one of the subnets that you created in each AZ as attachment subnets.
   8. Repeat the process for the other two VPC IDs, spokes A and B. For the subnet VPC attachment, select the corresponding AZ for each, then the Subnet ID dropdown list shows the spoke subnet that you created.
   9. Wait for the State to become Available.

      

4. Create TGW associations:
   1. In the AWS console, open the VPC service.
   2. Select Transit Gateway Route Tables, then select the spoke route table.
   3. On the Associations tab, click the Create Association button.
   4. From the Choose attachment to associate dropdown list, select the spoke 1 VPC.
   5. Click Create association.
   6. Repeat the process for spoke B, which will be the second association for the route table.
   7. Wait for both associations to achieve the Associated state before proceeding.
   8. Next, select the security route table.
   9. Repeat the same as above, and select the security VPC attachment from the Choose attachment to associate dropdown list. Click Create association.