Situation: The client tries to commit a new configuration on their PA Firewall, but it failed.
Troubleshooting: Login PA firewall and go to NETWORK>Virtual Routers>Statice Routes>default, Find both Route to AWS New and Route to AWS New 2 (2 tunnels) are setup 10. The second one should be different METRIC. Setup the second tunnel to 20, fix the problem.