A declarative configuration that connects a Virtual Private Cloud (VPC) to other VPCs or external networks while inserting advanced services such as Masquerade, PAT, and 1:1 NAT. Gateway intercepts the appropriate traffic by attracting traffic through BGP route advertisements.