https://aws.amazon.com/blogs/aws/aws-solution-transit-vpc/