How to put VPC attachment of core network into appliance mode when using AWS Cloud WAN


About AWS CloudWAN. I cannot figure out how to put VPC attachment of core network into appliance mode. If i want to do inspection for either ingress or east-west traffic, i would need that to make traffic symmetric.

Target Architecture

Icon is transit gateway but for this discussion, it should be considered as Core Network Edge with transit gateway, i'd set the bottom VPC attachment into Appliance mode. inspection depicted here is AWS network firewall but it's also just to show the question. It might be gwlb with NVA or just NVAs.

profile picture
asked 9 months ago507 views
1 Answer
Accepted Answer

Hi Fabio,

The TGW Appliance mode is applied to a specific 'Attachment ID'. Using CloudShell (currently this can only be enabled via CLI and not GUI) you can use below command to enable it for the VPC attachment that connects to the Inspection VPC.

Example command:

aws ec2 modify-transit-gateway-vpc-attachment --transit-gateway-attachment-id tgw-attach-xxxxX12345 --options ApplianceModeSupport=enable


Please note: CloudWAN does not natively support Appliance mode (yet)

profile picture
answered 9 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions