N.Virginia region: The second account will use one Region in us-east-1. We will create two VPCs inside with private subnet. All of them can not connect to internet. VPC5 will help us validating VPN connection and Transit Gateway peering connection. VPC4 will help us validating the Inter-region VPC Peering connection.
On-premise region: This is simulation of on-premise server, which is using LibreSwan instead of my real devices for establishing VPN Site-to-Site connection to AWS Cloud. It contains a Internet Gateway, a VPC and a EC2 with public subnet inside. We will automate the installation processing LibreSwan by Bashshell through Terraform. You can understand more about LibreSwan here.
Now, let start contruct!