Centralized Internet Egress Through a Transit Gateway
Replace a NAT gateway per VPC with one shared egress VPC. You build transit gateway route tables that send spoke internet traffic to the egress VPC, route replies back, keep spokes isolated from each other, and prove it with Systems Manager.
Level: Advanced · Time: about 80 minutes · Region: us-east-1
AWS services you'll use
- Transit Gateway
- VPC
- NAT Gateway
- Systems Manager
What you'll do in this lab
- Create the two transit gateway route tables
- Route spokes to the egress VPC and back
- Update the VPC route tables
- Prove egress works and spokes are isolated
- Verify the solution end to end
Each task is checked against your live AWS account. Step-by-step instructions, hints and verification unlock when you start the lab.
Before you start
- Associate-level architecture (SAA-C03 or equivalent)
- Comfortable in the VPC, EC2 and IAM consoles and CloudShell
How the lab works
- Get a real, temporary AWS account locked to one region. No AWS account of your own needed.
- Build in the real AWS console with a guide beside it, and hints when you are stuck.
- Verify every task: we check the resources in your live account.
- Automatic cleanup: everything is deleted when you stop, and nothing is billed to you.
Questions about this lab
Do I need my own AWS account?
No. When you start the lab, Cloud Arena gives you a real, temporary AWS account with its own login, locked to one region. You work in the real AWS Management Console, not a simulator.
Will AWS charge me anything?
No. Cloud Arena pays for the AWS resources, and everything you create is deleted automatically when you stop the lab or the session ends. Nothing is billed to you by AWS.
How long does the Centralized Internet Egress Through a Transit Gateway lab take?
Plan for about 80 minutes. The session timer is shown on screen, and every task is checked against your live AWS account when you click Verify.
How do I get access to this lab?
It is included in the AWS Certified Solutions Architect – Professional plan: a one-time payment for every lab in the path, 2 attempts per lab and a 7-day money-back guarantee. You can also start with the 5 free labs.
Does this lab help with the Solutions Architect – Professional (SAP-C02) exam?
Yes. It is part of the AWS Certified Solutions Architect – Professional path, which covers the hands-on skills behind the exam. Doing the task in a real account is what makes the questions easier to reason about.
Related AWS labs
- ECS Fargate Microservices: Service Connect Discovery and Service Auto Scaling
- Resilient Serverless Order API: Idempotency Keys, Queues and Dead-Letter Queues
- Right-Size Permissions: Generate a Least-Privilege Policy from CloudTrail Activity
- Self-Healing Web Tier: ELB Health Checks, Lifecycle Hooks and Event-Driven Validation
- Tag Governance: Required-Tags Rule, Bulk Tagging and Resource Groups
- Centralized VPC Interface Endpoints Shared Through Private Hosted Zones