when you create smart group will use a tag that defined with all resources.
for example:
- -can be tag a resource with their account id of each csp
- can be tag a resource to their region of each csp
can be use smart group with distributed cloud firewall when you do segmentation and enable it at transi gateway to apply all resource at spokes
note:
Transit Gateways are not supported as a SmartGroup resource.
Aviatrix Gateway IP addresses will not be included in any SmartGroup, even if a SmartGroup filter matches an Aviatrix Gateway IP address. If a subnet or VPC/VNet is added to an app domain, the Aviatrix Gateway IP addresses are removed from the corresponding CIDRs.
https://docs.aviatrix.com/documentation/latest/building-your-network/smartgroups-about.html?expand=true
link: in aviatrix cloud netorking youtube
Distributed Cloud Firewall Demo - YouTube
Aviatrix: Distributed Cloud Firewall (youtube.com)