Modify a transit gateway in AWS Transit Gateway - Amazon VPC
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 13, 2026.

Modify a transit gateway in AWS Transit Gateway

You can modify the configuration options for a transit gateway. When you modify a transit gateway, any existing transit gateway attachments don't experience any service interruptions.

You cannot modify a transit gateway that has been shared with you.

You cannot remove a CIDR block for the transit gateway if any of the IP addresses are currently used for a Connect peer.

Note

Transit gateways that have Encryption Support enabled can be attached to VPCs with Encryption Controls in monitor or Enforce mode, or to VPCs that don’t have Encryption Controls enabled. VPCs that have Encryption Controls in Enforce mode can ONLY be attached to Transit Gateways that have Encryption Support enabled.

For more detailed information, see Encryption Support for AWS Transit Gateway.

To modify a transit gateway

  1. Open the Amazon VPC console at https://eusc-de-east-1.console.amazonaws-eusc.eu/vpc/.

  2. On the navigation pane, choose Transit Gateways.

  3. Choose the transit gateway to modify.

  4. Choose Actions, Modify transit gateway.

  5. Modify the options as needed, and choose Modify transit gateway.

To modify your transit gateway using the AWS CLI

Use the modify-transit-gateway command.