Task Statement 3.2: Monitor and analyze network traffic to troubleshoot and optimize connectivity patterns.
📘AWS Certified Advanced Networking – Specialty
1. What is Network Topology in AWS?
Network topology means the structure and layout of how AWS networks are connected.
In AWS, this includes:
- VPCs (Virtual Private Clouds)
- Subnets inside VPCs
- AWS Transit Gateway (TGW)
- VPN connections
- AWS Direct Connect connections
- On-premises networks (data centers)
- Cross-region network links
Simple meaning:
It shows:
- What is connected to what
- How traffic flows between networks
- Which path data takes
2. Why Network Topology Matters (Exam Importance)
In large AWS environments, organizations may have:
- Multiple VPCs across regions
- Hybrid connectivity (on-prem + AWS)
- Multiple accounts (AWS Organizations)
- Complex routing through Transit Gateway
Without topology visibility:
- You cannot easily find routing problems
- You cannot identify broken connections
- You cannot optimize traffic flow
- Troubleshooting becomes slow and manual
3. AWS Tool for Topology Mapping
AWS Transit Gateway Network Manager
This is the main service used for network topology visualization and monitoring.
What it does:
It provides a global view of your AWS network infrastructure.
It helps you:
- See all connected networks in one place
- Understand traffic paths
- Detect routing issues
- Monitor connectivity health
4. Key Components You Must Know (Exam Focus)
4.1 AWS Transit Gateway (TGW)
A Transit Gateway is a central hub that connects:
- Multiple VPCs
- VPN connections
- Direct Connect gateways
- On-prem networks
Why it matters:
Instead of connecting VPCs one-by-one (many-to-many), TGW uses a hub-and-spoke model.
4.2 Transit Gateway Attachments
These are connections between TGW and:
- VPCs
- VPNs
- Direct Connect gateways
Each attachment is a connection point in topology maps.
4.3 Network Manager Global Network
This is a logical container that includes:
- Multiple AWS Regions
- Multiple Transit Gateways
- On-premises locations
It gives a global topology view across regions.
4.4 Sites and Devices (Hybrid Networks)
Network Manager can represent:
- On-premises routers
- Branch locations
- Customer data centers
These are mapped as sites and devices in topology view.
5. What Network Topology Looks Like in AWS
Using Transit Gateway Network Manager, you can see:
5.1 Visual Map of:
- VPC A → Transit Gateway → VPC B
- On-premises → VPN → Transit Gateway
- Direct Connect → Transit Gateway → AWS workloads
5.2 Traffic Paths
You can trace:
- Source VPC
- Intermediate Transit Gateway
- Destination VPC or on-prem system
6. How It Helps in Troubleshooting
This is a major exam area.
6.1 Identify Broken Connectivity
Example issues:
- VPC not reachable
- VPN tunnel down
- Route table missing entry
Network Manager shows:
- Red (down links)
- Green (healthy links)
6.2 Check Routing Problems
You can identify:
- Missing routes in Transit Gateway route tables
- Incorrect route propagation
- Overlapping CIDR blocks
6.3 Validate End-to-End Path
You can confirm:
- Whether traffic is allowed from source to destination
- Whether a firewall or route table is blocking it
7. How It Helps in Optimization
Topology mapping is not only for troubleshooting.
It also helps to:
7.1 Reduce Complex Connections
Instead of many VPC peering connections:
- Use Transit Gateway
- Simplify architecture
7.2 Improve Traffic Flow
You can:
- Identify inefficient routing paths
- Reduce cross-region traffic when unnecessary
- Optimize Direct Connect usage
7.3 Improve Security Visibility
You can see:
- Which networks are connected
- Which routes allow traffic between environments
8. Exam-Relevant Features of Transit Gateway Network Manager
You must remember these:
8.1 Topology Visualization
- Graph-based network view
- Shows all attachments and routes
8.2 Connectivity Monitoring
- Detects failed links
- Shows health status
8.3 Route Analysis
- Checks reachability between networks
8.4 Multi-account Support
- Works across AWS Organizations
8.5 Multi-region Support
- Provides global topology view
9. Common Exam Scenarios
Scenario 1: VPC cannot reach another VPC
You use Network Manager to:
- Check TGW attachment status
- Check route table propagation
- Identify missing route
Scenario 2: On-prem cannot reach AWS
You check:
- VPN or Direct Connect status
- TGW route tables
- Site-to-site connectivity in topology
Scenario 3: Complex multi-VPC architecture
You use:
- Global Network view
- TGW topology graph
to simplify understanding
10. Key Exam Keywords to Remember
- Network topology
- Transit Gateway
- Network Manager
- Route tables
- Attachments
- Connectivity analysis
- Hybrid networking
- Global network view
11. Summary (Very Important for Exam)
- Network topology shows how AWS networks are connected
- AWS Transit Gateway Network Manager is used to visualize and monitor it
- It helps in:
- Troubleshooting connectivity issues
- Understanding routing paths
- Optimizing network design
- It supports:
- Multi-VPC
- Multi-account
- Multi-region
- Hybrid networks (on-prem + AWS)
