There is a lot of documentation out there about how to connect to an AWS TGW from a VM firewall, or how to connect to AWS from Prisma Access using various methods. I found that in order to accomplish my exact needs I had to tinker a lot outside of the documentation:
1. Use AWS Native networking to receive the service connection (TGW or individual VPC)
2. Set up redundant tunnels
3. Use BGP for routing
Please see the attached file documenting how I achieved this
Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.