(1) - As @PaulMcG stated, you will have to use the VIP address.   For (2) and (3), and you can only get an increase in resilience here by also using a pair of VMX in AWS and Azure so you can use SDWAN.   I've created a guide on how I do this for AWS. https://www.ifm.net.nz/cookbooks/meraki-ha-vmx-amazon-aws.html    Here is a guide for doing it in Azure. https://documentation.meraki.com/MX/Other_Topics/Deploying_Highly_Available_vMX_in_Azure  ... View more