yes, it is possible to use a private NAT gateway in the central account in front of a transit gateway. You can configure the routing tables associated with the transit gateway to route traffic destined for overlapping IP addresses through the NAT gateway before it goes to the corporate VPN. This setup allows you to perform NAT translation for the overlapping IP addresses, ensuring proper routing of traffic to the corporate network. However, ensure proper network segmentation and security measures are in place to manage traffic effectively and securely.
Hope it clarifies and if does I would appreciate answer to be accepted so that community can benefit for clarity, thanks ;)
Here are also some notes I wrote down how one could evolve different VPC configurations, including one with internal NAT gateways, and how that would help teams deploying future-proof networks independently.
- Accepted Answerasked 7 months ago
- How do I troubleshoot the connection between Transit Gateway and third-party virtual appliances running in a VPC?AWS OFFICIALUpdated 2 years ago
- How do I monitor my transit gateway and Site-to-Site VPN on a transit gateway using Network Manager?AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 10 months ago
- AWS OFFICIALUpdated 2 years ago
- EXPERTpublished 21 days ago