Brief description of what this blueprint deploys and demonstrates.
Brief explanation of the architecture and key data flows.
- Aviatrix Control Plane (v7.1+) - Controller and CoPilot
- Terraform (v1.5+)
- AWS CLI
- AWS account with permissions to create VPCs, EC2 instances, etc.
- Aviatrix Control Plane with AWS account onboarded
- At least 2 available Elastic IPs in the target region
- Service quota for X (if applicable)
| Resource | Description | Quantity |
|---|---|---|
| AWS VPC | Main VPC for workloads | 1 |
| Aviatrix Transit Gateway | Primary transit gateway | 1 |
| Aviatrix Spoke Gateway | Spoke gateway for workloads | 1 |
| EC2 Instance | Test instance for connectivity | 1 |
Estimated Cost: ~$X/hour when running
git clone https://github.com/aviatrix/aviatrix-blueprints.git
cd aviatrix-blueprints/blueprints/<blueprint-name>cp terraform.tfvars.example terraform.tfvarsEdit terraform.tfvars with your values. See Variables section for details.
terraform init
terraform plan
terraform applyType yes when prompted to confirm.
Deployment takes approximately X minutes.
After deployment completes:
- Check Terraform outputs:
terraform output - Verify in Aviatrix CoPilot: Navigate to Topology to view deployed resources
- Verify in cloud console: Check that VPCs/instances are created
| Variable | Description | Type | Default | Required |
|---|---|---|---|---|
controller_ip |
Aviatrix Control Plane (Controller) IP address | string |
- | yes |
controller_username |
Controller admin username | string |
"admin" |
no |
controller_password |
Controller admin password | string |
- | yes |
aws_region |
AWS region for deployment | string |
"us-east-1" |
no |
name_prefix |
Prefix for resource names | string |
"blueprint" |
no |
| Output | Description |
|---|---|
transit_gateway_id |
ID of the Aviatrix Transit Gateway |
spoke_vpc_id |
ID of the spoke VPC |
test_instance_ip |
Public IP of the test instance |
Verify basic connectivity between components:
# SSH to test instance
ssh -i <key.pem> ec2-user@<test_instance_ip>
# Ping another resource
ping <target-ip>Expected result: Ping succeeds, traffic flows through Aviatrix gateway.
- Navigate to CoPilot > [relevant section]
- Perform action
- Verify expected behavior
Expected result: [describe expected outcome]
Use this section to guide a demonstration:
- Show the architecture: Open CoPilot topology view
- Demonstrate feature X: Walk through the configuration
- Generate traffic: Run connectivity test
- Show visibility: View in CoPilot monitoring
terraform destroyType yes when prompted to confirm.
If Terraform destroy fails, manually delete:
- Any load balancers created by applications
- Any manually created resources
Confirm no resources remain:
# Check for remaining resources (adjust filter as needed)
aws ec2 describe-vpcs --filters "Name=tag:Name,Values=*<name_prefix>*"Symptom: Aviatrix gateway times out during creation
Solution:
- Verify AWS account is onboarded in the Control Plane
- Check security group allows Controller communication
- Verify sufficient EIP quota in the region
Symptom: Description of the problem
Solution: Steps to resolve
This blueprint is currently tested with:
| Component | Version |
|---|---|
| Aviatrix Controller | 8.0.x |
| Aviatrix Terraform Provider | 3.2.0 |
| Terraform | 1.9.x |
| AWS Provider | 5.80.x |
Note: The blueprint may work with other versions, but these are the versions used for validation.
See the Contributing Guide for information on how to contribute to this blueprint.
Apache 2.0 - See LICENSE
