Hi everyone,    Have you tried AWS transit gateway! it's a new service I tested and it worked for that use case you need. In my lab, I have the following diagram. and I was able to ping "storage" client from the client behind the physical MX.     Also, Transit gateway works between different accounts as per this here:      I hope this helps someone! ... View more