If you have your own AWS presence but need a connection method that can support Kerberos and Radius protocols, which PrivateLink cannot, the Transit Gateway (TGW) network might be the right option for you.
There are two different types of TGW networks:
- TGW peering network
- With this model, the TGW peers to the TGW in the customer hub environment in
PingOne Advanced Services. Traffic from all
environments in a PingOne Advanced Services region will
travel across this peering connection.TGW peering network diagram
TGW peering network diagram 
Learn more about items you might need to consider regarding setup in Transit Gateway (TGW) peering requirements.
- TGW RAM share network
- With this model, the TGW is connected to each VPC instead using the customer hub
environment, which allows for data separation.TGW RAM share network diagram
TGW RAM share network diagram 
Learn more about items you might need to consider regarding setup in Transit Gateway (TGW) RAM share requirements.