Dive Deep into the AWS Transform Network Migration Agent: Hub and Spoke Network Setup

This article guides users through customizing a hub and spoke network topology deployed by AWS Transform, covering firewall deployment, east-west routing, outbound internet access, and inbound application publishing.

• Deploy a firewall in the Inspection VPC using AWS Network Firewall or third-party appliances from AWS Marketplace
• Enable east-west traffic between spoke VPCs by adding firewall rules and updating security groups
• Configure outbound internet access by routing through the Outbound VPC with NAT gateways and return paths
• Publish internet-facing applications through the Inbound VPC using load balancers with Transit Gateway routing
• Validate network paths using Reachability Analyzer and firewall logs before production deployment

AWS Transform automates baseline hub and spoke network deployment, while users customize routing and firewall inspection to match their security requirements and business needs.