Cloud Architecture

Centralized Egress Inspection on AWS

Cloud Architecture diagram · made in Skemio

Centralized Egress Architecture diagram showing Spoke VPC routing through Transit Gateway into AWS Network Firewall, NAT Gateway, and the Internet.
Centralized Egress Architecture diagram showing Spoke VPC routing through Transit Gateway into AWS Network Firewall, NAT Gateway, and the Internet.
Open it in SkemioMake your own

What it shows

  • Routes 100% of outbound internet traffic through an inspection VPC.
  • AWS Network Firewall enforces Suricata stateful rules and domain filtering.
  • NAT Gateway sits behind the firewall to avoid bypassing threat checks.

The takeaway

Route all spoke egress through an inspected transit VPC to block malware, C2 callbacks, and data exfiltration.

More cloud architecture diagrams