Prior to 2026, connecting AWS Client VPN to multiple VPCs demanded extra infrastructure with intermediate VPCs and resulted in client IP address obfuscation. The native integration introduced that year connected Client VPN endpoints directly to AWS Transit Gateway, removing the need for an intermediate VPC and thus simplifying network topology.
This integration preserves the source IP of remote users end-to-end, enhancing authorization policies and security auditing capabilities. Additionally, Transit Gateway flow logs enable detailed connection-level visibility, useful for troubleshooting and compliance. The feature was released in all regions supporting Client VPN with no extra cost beyond usage.
Source & further reading
AWS Client VPN now supports native AWS Transit Gateway integration ↗Source published 2026-04-23. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.