This FireOwls All-CCIE Team Installation includes Cisco CSR Transit VPC in AWS Public Cloud which allows N+1 subscriber VPCs to be added and simplify connectivity to the customers private data center as well as protect traffic. Shared services can be provided in the transit VPC.
The Transit VPC is the hub for connectivity to all other VPCs
Cisco CSR pair is responsible for connecting traffic between all VPCs
Additional VPCs can be created as needed and connect only to the transit VPC
Allows for a scalable and secure solution to having multiple VPCs
Applications can be grouped together based on specific functions. This diagram shows a dev, test and production VPC