Network Topology Transit Gateway A centralized Transit Gateway connects all VPCs. Security Isolation Blackhole routes prevent unwanted cross-VPC traffic. Flow Logs All Transit Gateway attachments publish flow logs to CloudWatch.