View a markdown version of this page

Networking account - AMS Advanced User Guide

Networking account

The Networking account serves as the central hub for network routing between AMS multi-account landing zone accounts, your on-premises network, and egress traffic out to the Internet. In addition, this account contains public DMZ bastions that are the entry point for AMS engineers to access hosts in the AMS environment. For details, see the following high-level diagram of the networking account below.

Network architecture diagram showing Egress and DMZ VPCs with availability zones, NAT gateways, DMZ bastions, and routing to internet and on-premises networks.