When utilizing an egress/ingress Transit Gateway VPC or SDWAN VPC, there needs to be the option to remove the igw and igw route. This will allow even public subnets to route ONLY to the transit gateway and thus the transit VPC.
Considerations:
What will allow the best long term default strategy?
What will ensure that it cannot be easily manipulated to bypass compliance of routing out the firewalls or SDWAN devices?
Describe the feature
When utilizing an egress/ingress Transit Gateway VPC or SDWAN VPC, there needs to be the option to remove the igw and igw route. This will allow even public subnets to route ONLY to the transit gateway and thus the transit VPC.
Considerations: What will allow the best long term default strategy? What will ensure that it cannot be easily manipulated to bypass compliance of routing out the firewalls or SDWAN devices?