network-orchestration-for-aws-transit-gateway

network-orchestration-for-aws-transit-gateway copied to clipboard

**What were you initially searching for in the docs?** We updated the HUB stack well from v2 to v3.0.0. The documentation was helping for that. But with the new version...

jwiechmann

**Is your feature request related to a problem? Please describe.** I find the STNO console page provided through cloudfront as insecure. It doesn't leverage MFA or WAF and the page...

l4h1n

**What were you initially searching for in the docs?** We're in the process of trying to work out how we're going to migrate from STNO v2.0.0 to STNO v3.0.x and...

t04glovern

Transit gateway attachment fails due to missing IAM service role

1

Seen when using the latest STNO version. In a new aws account where no previous transit gateway attachments were completed via the console, the IAM service role 'AWSServiceRoleForVPCTransitGateway' does not...

kirwanb

Allow option to mix Principal Types

1

Currently STNO allows only to share with a List of Account IDs or Organization ARN. It would be great to allow for a mixture of both. For example in the...

jmino

Allow option to add OU as a Principal Type

1

Currently STNO only allows to share with a List of accounts and Organization. It would be good option to add an option to share with just an OU by passing...

kingstobcj

Update Hub Cloudformation Template to support Disabling External Principals for Resource Share

1

Currently when a Resource Share is created for the Transit Gateway it is configured with the Default Configuration of AllowExternalPrincipals: True This can be a security issue and a good...

aussiecloudguy

Allow STNO to update the main route table

2

We have a number of accounts that we connect to a central VPC with STNO. We use the main route table for the spoke accounts, with a default route to...

kb-tonyj

Updated tags in v2.0.0 causes replacement of Transit Gateway and its route tables

5

Upgrading STNO from v1.0.0 to v2.0.0 causes a replacement of Transit Gateway and its route tables due to changes in the tags, as documented [here](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-transitgateway.html#cfn-ec2-transitgateway-tags) This also caused duplicate Transit...

david-prado

CreateTransitGatewayVpcAttachment failing with Client.UnauthorizedOperation in spoke account

11

TGW attachment creation is failing in spoke account due to an access denied error. Haven't changed any templates and all the roles seems have the required permissions and trust relationships...

kbosco