04-29-2020 05:17 AM
You would typically do one or the other. HA is use cases where you are routing through firewalls or firewalls in a pool behind a load balancer in an application hosting scenario. There are also multi-VPC designs using a TGW. Please have a look at the Reference Architecture for some additional information.
https://www.paloaltonetworks.com/resources/reference-architectures/aws