Ravi Sir's Cards › AWS
Segmentation and endpoints
This revision card explains Segmentation and endpoints. It starts from the need that one flat TGW route table lets prod talk to every sandbox. It describes separate TGW route tables isolate domains; PrivateLink keeps traffic off the public internet. The how-to section notes prod/shared/sandbox RT associations; enable private DNS on interface endpoints. An example on the card is sandbox cannot route to prod DB TGW attachment.
Read card text
What this card says
Why do we need it?
One flat TGW route table lets prod talk to every sandbox.
What is it?
Separate TGW route tables isolate domains; PrivateLink keeps traffic off the public internet.
PrivateDnsEnabled
How to do it
Prod/shared/sandbox RT associations; enable private DNS on interface endpoints.
Example
Sandbox cannot route to prod DB TGW attachment.