*** This version of Confluence is for testing only and contains a copy of content from June 29th 2026. No changes will be preserved. ***
...
draw.io source: dc-arch-2023.customer.10.0.0.8.v2.drawio
Paths and Traffic Filtering
Inbound Traffic – From TGW to EC2 Instance
Resource | Filtering | Notes | |
|---|---|---|---|
| Source | TGW | — | |
| ↓ | TGW Attachment | — | |
| ↓ | TGW Attachment Elastic Network Interface | — | |
| ↓ | NACL of Subnet attached to TGW | outbound rules of NACL attached to utility subnet | The NACL bound to the utility subnets allow all traffic in and out. |
| ↓ | Route Table of Subnet attached to TGW | — | |
| ↓ | NACL of Subnet containing EC2 instance | inbound rules of NACL for destination subnet | |
| ↓ | EC2 Instance Security Group | inbound rules of SG | |
| Destination | EC2 Instance Elastic Network Interface | — |
Outbound Traffic – From EC2 Instance to TGW
Resource | Filtering | Notes | |
|---|---|---|---|
| Source | EC2 Instance Elastic Network Interface | — | |
| ↓ | EC2 Instance Security Group | outbound rules of SG | |
| ↓ | NACL of Subnet containing EC2 instance | outbound rules of NACL for source subnet | |
| ↓ | Route Table of Subnet containing EC2 instance | — | |
| ↓ | NACL of Subnet attached to TGW | inbound rules of NACL attached to utility subnet | The NACL bound to the utility subnets allow all traffic in and out. |
| ↓ | TGW Attachment Elastic Network Interface | — | |
| ↓ | TGW Attachment | — | |
| Destination | TGW | — |
...