From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Network Access Analyzer

Network Access Analyzer

Network Access Analyzer is a feature of the Network Manager service that allows you to identify unintended network access to your AWS resources, as well as to verify compliance with your organization's network security strategy. For example, it can be used to identify resources in a VPC that can be directly accessed via an internet gateway, or the other way around, resources that can directly access the internet. It can confirm isolation of different network segments, or it can be used to verify that resources are accessible only through desired paths. When performing its analysis, Network Access Analyzer does not actually send traffic. Instead, it uses automated reasoning processes to examine the possible network paths that traffic could take between sources and destinations within your VPC based on your environment's configuration. Naturally, there are some limitations to what Network Access Analyzer can evaluate. It cannot evaluate network paths that leave the scope of AWS…

Contents