Transit gateway policy tables - Amazon VPC

Transit gateway policy tables

Transit gateway dynamic routing uses policy tables to route network traffic for AWS Cloud WAN. The table contains policy rules for matching network traffic by policy attributes, and then maps the traffic that matches the rule to a target route table.

You can use dynamic routing for transit gateways to automatically exchange routing and reachability information with peered transit gateway types. Unlike with a static route, traffic can be routed along a different path based on network conditions, such as path failures or congestion. Dynamic routing also adds an extra layer of security in that it's easier to re-route traffic in the event of a network breach or incursion.

Note

Transit gateway policy tables are currently only supported in Cloud WAN when creating a transit gateway peering connection. When creating a peering connection, you can associate that table with the connection. The association then populates the table automatically with the policy rules.

For more information about peering connections in Cloud WAN, see Peerings in the AWS Cloud WAN User Guide.

Create a transit gateway policy table

To create a transit gateway policy table using the console
  1. Open the Amazon VPC console at https://console.aws.amazon.com/vpc/.

  2. On the navigation pane, choose Transit gateway policy table.

  3. Choose Create transit gateway policy table.

  4. (Optional) For Name tag, enter a name for the transit gateway policy table. This creates a tag, where the tag value is the name that you specify.

  5. For Transit gateway ID, select the transit gateway for the policy table.

  6. Choose Create transit gateway policy table.

To create a transit gateway policy table using the AWS CLI

Use the create-transit-gateway-policy-table command.

Delete a transit gateway policy table

Delete a transit gateway policy table. When a table is deleted, all policy rules within that table are deleted.

To delete a transit gateway policy table using the console
  1. Open the Amazon VPC console at https://console.aws.amazon.com/vpc/.

  2. On the navigation pane, choose Transit gateway policy tables.

  3. Choose the transit gateway policy table to delete.

  4. Choose Actions, and then choose Delete policy table.

  5. Confirm that you want to delete the table.

To delete a transit gateway policy table using the AWS CLI

Use the delete-transit-gateway-policy-table command.