AWS Certified Advanced Networking – Specialty (ANS-C01)Network Management and OperationsMedium

A company is experiencing high network latency between its on-premises data center and AWS VPCs over its AWS Site-to-Site VPN connections. They have already verified that their internet connection bandwidth is sufficient and on-premises firewall rules are correctly configured. They suspect that the issue might be related to suboptimal routing or network congestion within the AWS network or the internet path to AWS. Which AWS service can help diagnose and optimize the network path performance between their on-premises network and AWS?

  1. AVPC Flow Logs
  2. BAWS VPN CloudHub
  3. CAmazon CloudWatch Logs Insights
  4. DAWS Transit Gateway Network Manager
Show answer & explanation

Correct answer: D. AWS Transit Gateway Network Manager

AWS Transit Gateway Network Manager provides a single console to visualize and manage your global network across AWS and on-premises resources. It includes features like the Network Health Dashboard, Events, and Topology view, which can help diagnose performance issues, identify suboptimal routing, and detect congestion across the entire hybrid network, including VPN connections.

Why the other options are wrong

  • A. VPC Flow Logs capture IP traffic information within a VPC but do not provide insights into the performance or health of the VPN connection itself or the broader network path from on-premises to AWS.
  • B. AWS VPN CloudHub is a design pattern for connecting multiple on-premises sites via AWS VPNs and Transit Gateway, but it's not a monitoring or diagnostic service.
  • C. Amazon CloudWatch Logs Insights is for querying and analyzing log data, which can be useful for post-mortem analysis, but it doesn't offer real-time network path diagnostics or topology visualization for hybrid networks.

Network Manager for Hybrid

AWS Transit Gateway Network Manager centralizes the management and monitoring of global networks, including AWS VPCs and on-premises connections (VPN, Direct Connect).

  • Single console for hybrid network visibility
  • Monitors network health and performance
  • Provides topology view
  • Helps diagnose routing and congestion issues

Memory trick: Network Manager: The command center for your entire hybrid network's health.

More Network Management and Operations questions