TGW Policy-Based Routing
Same private IP, two paths — prove Transit Gateway Policy-Based Routing sends HTTPS via the hub while HTTP goes direct.
Three-account hub-and-spoke lab for destination-only TGW routing versus a policy table. Rule 100 steers TCP/443 via the Hub VPC; rule 200 leaves TCP/80 direct — destination IP alone cannot explain the split.