Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

draw.io source: dc-arch-2023.customer.10.0.0.8.v2.drawio

Paths and Traffic Filtering

Inbound Traffic – From TGW to EC2 Instance


Resource

Filtering

Notes

SourceTGW
TGW Attachment
TGW Attachment Elastic Network Interface
NACL of Subnet attached to TGWoutbound rules of NACL attached to utility subnetThe NACL bound to the utility subnets allow all traffic in and out.
Route Table of Subnet attached to TGW
NACL of Subnet containing EC2 instanceinbound rules of NACL for destination subnet
EC2 Instance Security Groupinbound rules of SG
DestinationEC2 Instance Elastic Network Interface


Outbound Traffic – From EC2 Instance to TGW


Resource

Filtering

Notes

SourceEC2 Instance Elastic Network Interface
EC2 Instance Security Groupoutbound rules of SG
NACL of Subnet containing EC2 instanceoutbound rules of NACL for source subnet
Route Table of Subnet containing EC2 instance
NACL of Subnet attached to TGWinbound rules of NACL attached to utility subnetThe NACL bound to the utility subnets allow all traffic in and out.
TGW Attachment Elastic Network Interface
TGW Attachment
DestinationTGW


...