aws-network-diagnostics

Diagnose AWS network connectivity issues across VPCs, security groups, and route tables.

3|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/aws-samples/sample-migration-agentic-cli-assistant --skill aws-network-diagnostics
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aws-network-diagnostics
Source: https://github.com/aws-samples/sample-migration-agentic-cli-assistant/tree/main/.kiro/skills/ops-networking
Command: npx skills add https://github.com/aws-samples/sample-migration-agentic-cli-assistant --skill aws-network-diagnostics

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Diagnoses and troubleshoots AWS network connectivity issues across VPCs, security groups, network ACLs (NACLs), route tables, VPC endpoints, DNS, load balancers, and AWS Transit Gateway to help identify and fix connectivity problems quickly.

Core Features & Use Cases

  • VPC Reachability Analyzer guidance and recommended checks for validating network paths.
  • Security group, NACL, route table, and DNS checks to verify access controls and routing.
  • Multi-layer diagnostics across VPCs, endpoints, and Transit Gateways for common connectivity scenarios (cross-VPC, public/private subnet access, and private service access).

Quick Start

Use the VPC Reachability Analyzer to verify connectivity between a source and destination in your AWS account.

Frequently Asked Questions about aws-network-diagnostics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot AWS VPC connectivity issues between subnets?

Troubleshoot AWS VPC connectivity by inspecting security groups, NACLs, and route tables to verify access controls and routing. This diagnostic approach helps identify and resolve cross-VPC or public/private subnet connectivity problems quickly.

What is the best way to validate network paths using AWS Reachability Analyzer?

Validate network paths using AWS Reachability Analyzer to verify connectivity between a source and destination in your AWS account. It checks configurations across VPCs, endpoints, and Transit Gateways to pinpoint blocking rules or routing issues.

Can I diagnose DNS resolution and load balancer connectivity problems in AWS?

Yes, you can diagnose DNS resolution and load balancer connectivity problems in AWS. The diagnostic process includes DNS resolution validation and multi-layer checks across VPC endpoints and load balancers to resolve private service access issues.

Why does my cross-VPC traffic fail to reach private services through Transit Gateway?

Cross-VPC traffic through Transit Gateway fails due to misconfigured route tables, restrictive NACLs, or security group rules. Diagnose the path by inspecting route table configurations and validating network reachability across connected VPCs.

Does this network diagnostics approach work for VPC endpoints and security groups?

Yes, this network diagnostics approach works for VPC endpoints and security groups. It supports guide-based diagnostics and access control verification across VPCs, endpoints, and related AWS resources to validate network paths.