VM-Series IPsec decouple lab — AWS (TGW Connect + BGP) and Azure (vWAN Hub BGP), validated failover, Terraform + PAN-OS config - View it on GitHub