This Terraform runbook will create the landing zone for a startup to begin building on Amazon Web Services. It will create the following resources:  

IAM	Network	Compliance
Account settings	VPCs DHCP option sets Subnets Elastic IPs Transit gateways Internet gateways NAT gateways Route tables Security groups	CloudTrail

 

Network solution overview

This architecture shows you how to use AWS Transit Gateway to centralize outbound internet traffic from multiple VPCs using hub-and-spoke design. This design includes two NAT gateways, as illustrated in the following diagram.