AWS Security ChangesHomeSearch

AWS vpc: Add 1:1 NAT quotas to transit gateway quotas page

Service: vpc · 2026-10-23 · Documentation low

File: vpc/latest/tgw/transit-gateway-quotas.md

Summary

Adds a new '1:1 NAT' section listing default quotas (50 NAT rules per attachment, 1,000 per transit gateway) and adds the section to the page's navigation list.

Security assessment

Purely a service quota documentation addition for the 1:1 NAT feature; no security control, vulnerability, or credential handling is described.

Evidence

NAT rules per transit gateway attachment | 50 | No  

Diff

diff --git a/vpc/latest/tgw/transit-gateway-quotas.md b/vpc/latest/tgw/transit-gateway-quotas.md
index 8b5caa6..9fbbdb6 100644
--- a//vpc/latest/tgw/transit-gateway-quotas.md
+++ b//vpc/latest/tgw/transit-gateway-quotas.md
@@ -7 +7 @@
-GeneralRoutingTransit gateway attachmentsBandwidthDirect Connect gatewaysMaximum transmission unit (MTU)MulticastNetwork ManagerAdditional quota resources
+GeneralRouting1:1 NATTransit gateway attachmentsBandwidthDirect Connect gatewaysMaximum transmission unit (MTU)MulticastNetwork ManagerAdditional quota resources
@@ -39,0 +40,9 @@ Advertised routes come from the route table that's associated with the Connect a
+## 1:1 NAT
+
+Name | Default | Adjustable  
+---|---|---  
+NAT rules per transit gateway attachment | 50 | No  
+NAT rules per transit gateway (across all attachments) | 1,000 | No  
+  
+For more information, see [1:1 NAT in AWS Transit Gateway](./tgw-nat.html).
+