CloudFormation Stack Architecture

The CloudFormation template creates the following nested stacks:

Appliance VPC Stack: Provisions a dedicated VPC, subnet, internet gateway, and route table entries that direct static pool traffic through the SMA 8200v elastic network interface (ENI). If RedirectAll is enabled, the stack also provisions an AWS NAT Gateway.

Appliance Instance Stack: Provisions the SMA 8200v EC2 instance, an Elastic IP address, a security group that allows TCP ports 22, 443, and 8443, and appliance initialization based on the parameters specified during deployment.

Site-to-Site VPN Stack (optional): Created only when SiteToSiteVpn is set to true. Provisions an AWS Transit Gateway, a Customer Gateway that represents the remote device, an IPsec VPN connection with two tunnels, and route table entries for the remote network CIDR. The stack also automatically creates an SMA access policy that grants the tunnel user access to the remote network CIDR.