Reference Deployment Datasheet
AWS Direct Connect + Palo Alto + BGP
This FireOwls All-CCIE Team have helped customers implement AWS and Palo Alto transit VPC. The solution allows a pair of Palo Alto VM-Series firewalls act as the transit hub for multiple subscriber VPC. This diagram details the routing configuration between a customers private data center and the AWS public cloud.