AWS Certified SysOps Administrator – AssociateMonitoring, Logging, and RemediationHard
A SysOps administrator is troubleshooting an application running on an EC2 instance that is experiencing high latency. They suspect network connectivity issues between the EC2 instance and an external service. They need to verify the network path, identify any dropped packets, and measure latency along the path without installing additional agents on the EC2 instance or modifying security groups. Which AWS service can provide this diagnostic capability?
- AAmazon VPC Reachability Analyzer
- BAWS Systems Manager Session Manager
- CAWS Network Watcher
- DAmazon VPC Flow Logs
Show answer & explanationAnswer & explanation
Correct answer: A. Amazon VPC Reachability Analyzer
Amazon VPC Reachability Analyzer is specifically designed to analyze network reachability between resources in your VPCs and on-premises networks. It provides path analysis, identifies blocked traffic, and can pinpoint networking configuration issues without requiring agent installation or active traffic generation.
Why the other options are wrong
- B. Systems Manager Session Manager provides secure shell access to instances, but it's not a network path analysis tool.
- C. AWS Network Watcher is a diagnostic tool for Azure, not AWS.
- D. VPC Flow Logs record IP traffic flow information, but they don't actively analyze reachability or latency along a path; they only show what traffic has already occurred.
VPC Reachability Analyzer
Amazon VPC Reachability Analyzer is a network diagnostics tool that enables you to analyze and debug network reachability between two resources in your VPCs. It identifies potential network configuration issues that could block traffic.
- Analyzes network path between resources.
- Identifies network configuration issues (e.g., security groups, NACLs, route tables).
- Does not require agents or traffic generation.
- Works for VPC and on-premises connections via VPN/Direct Connect.
Memory trick: Reachability Analyzer 'reaches' out to find network roadblocks.