Use an instance of an account as the default gateway for other accounts.

Question

Hi guys, how are you? I need help with a problem that may be simple. I have a networking account on AWS, which has two ec2 instances, which are 2 fortigates firewalls and they are in the sa-east-1 region, and I do all my throughput through the firewalls, I have a subnet for my firewall to use from igw , and the other subnet I leave the applications. However, I have other accounts that are in us-east-1 and I need their throughput to be through the same network account, does anyone have any ideas on how I can do this please?

Answer

Hi,

A Transit Gateway properly configured for cross-account traffic is what you are looking for: https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html

It will allow your bastion hosts to receive traffic in one account and route it to others.

This blog post implements a use case very close to your goal: https://aws.amazon.com/blogs/networking-and-content-delivery/creating-a-single-internet-exit-point-from-multiple-vpcs-using-aws-transit-gateway/

Best,

Didier

Use an instance of an account as the default gateway for other accounts.

Relevant content