Intercept IP packets

[zenonmb]

I have Tuya wifi door sensors that typically works with cloud ,but in my case I do not have internet (country house) . So I plan to use ESP32 as soft AP and default GW to capture the packets sent by the sensors and alarm locally . The issue I am facing and looking for advice is how to interecept the packet to the cloud and make the sensor think that the cloud is responding when it is actually the ESP32 .
Was thinkin on NAT router,but not sure.

I monitored this with wireshark at my home(with internet) and noticed that the sensor when triggered sends TCP connection to an IP add that belongs to AWS and then TLS hello and server done packets.

The TLS part I am not so concerned, since I have the keys and similar project has been done here EspTuya/readme.md at main · FrBerger83/EspTuya · GitHub
,but in that case they use an esp8266 to control Tuya devices (like switches) and the sensor behavior is different .(They start connections and in my case i need to listen to an incomming pkg. )

Any advice out there?