Individual skill
transitgateway
Configures AWS Transit Gateway: creating a hub and attaching VPCs, segmenting traffic with route tables, centralizing egress and inspection through a hub (appliances or a Gateway Load Balancer endpoint), forcing east-west traffic between VPCs through AWS Network Firewall, connecting on-premises networks over the transit-gateway side of a Site-to-Site VPN or Direct Connect attachment (including ECMP to aggregate bandwidth across multiple VPN tunnels), peering transit gateways across Regions, migrating from a VPC peering mesh, and routing IP multicast. Applicable when connecting many VPCs through one router, isolating environments, forcing VPC-to-VPC traffic through a central Network Firewall, reaching on-premises over the hub, linking Regions, or moving off a peering mesh. Not applicable for single-VPC routing, VPC peering between two VPCs (vpcpeering skill), Direct Connect gateway or virtual interface setup (directconnect skill), or Route 53 DNS work.
skills/specialized-skills/networking-and-content-delivery-skills/transitgateway/SKILL.md
Source commit 1761e96813ebcbd43ed81d19e837219033f0afe5
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 3, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 3,424
- Repository last updated
- Nov 6, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- engineering Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 7,812 bytesreferences/centralizing-egress-and-inspection.mddoc · 18,009 bytesreferences/connecting-on-premises-networks.mddoc · 16,432 bytesreferences/creating-a-transit-gateway-and-attaching-vpcs.mddoc · 14,483 bytesreferences/inspecting-east-west-traffic-with-network-firewall.mddoc · 20,906 bytesreferences/migrating-from-vpc-peering.mddoc · 12,013 bytesreferences/peering-transit-gateways-across-regions.mddoc · 15,392 bytesreferences/routing-multicast-traffic.mddoc · 12,074 bytesreferences/segmenting-traffic-with-route-tables.mddoc · 13,013 bytes
Read excerpt
# AWS Transit Gateway
## Overview
Domain expertise for configuring AWS Transit Gateway, the Regional network hub that connects many
VPCs and on-premises networks through a single router instead of a mesh of point-to-point
connections. Covers building the hub and attaching VPCs, segmenting traffic with route tables,
centralizing egress and inspection, east-west inspection with AWS Network Firewall, hybrid
connectivity over Site-to-Site VPN and Direct Connect, inter-Region peering, migrating off a VPC
peering mesh, and IP multicast.
This skill is a router. Each customer task maps to a procedure file under `references/`. Read the
matching reference in full before acting, then follow its constraints and steps. The reference
files are self-contained: each carries its own decision tables, constraints, procedure, and