Hub & Spoke architecture with AWS Control Tower

Question

Can anyone help with any refrence architecture of hub and spoke architecture implementation (network account with TGW) on AWS Control Tower?

Accepted Answer

Hi,

This [blog](https://aws.amazon.com/blogs/mt/scale-multi-account-architecture-aws-network-firewall-and-aws-control-tower/) discusses similar architecture with TGW + Centralized Networking account and Control Tower.

This [whitepaper](https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/centralized-access-to-vpc-private-endpoints.html) has reference architectures for TGW hub & spoke deployment.

You can explore the [TGW workshop](https://controltower.aws-management.tools/networking/tgw/tgw-simple/)

Answer

Also, Please refer to this [https://aws.amazon.com/blogs/architecture/field-notes-working-with-route-tables-in-aws-transit-gateway/]()
It explains the packet flow with multiple Transit gateway route table in centralized account (Network account) and how you can seggerate the traffic.

Hub & Spoke architecture with AWS Control Tower

Relevanter Inhalt