This session walks through the evolution of an AWS network architecture—from a simple single-VPC environment with basic VPN connectivity to a scalable, multi-region design. It explores how to use AWS Transit Gateway and AWS Direct Connect to support growing connectivity requirements and then transition to AWS Cloud WAN. AWS Network Firewall will be used for centralised inspection of egress and east–west traffic across all scenarios. Attendees will gain a practical, step-by-step approach to designing, implementing, and evolving the infrastructure needed to support this progression.