AWS

Reachability

VPC Reachability Analyzer paths — proof that one resource can or cannot reach another.

Tier Builder

Category Networking

Refresh every 30 min

Scope regional

Live preview — demo data

What this pane shows

Existing Reachability Analyzer paths (and the option to launch new ones) showing whether traffic from a source ENI / instance can reach a destination, with the full path AWS computed: security groups, NACLs, route tables, peering connections, transit gateways. Includes the reason any leg is blocked.

Key use cases

Debug "why can't this app reach the database?" without trial-and-error.
Prove a private subnet really is isolated from the internet.
Confirm a security-group change didn't break legitimate traffic.
Audit accidentally-permissive paths between resources.

How to embed

lp.js is the single-entry loader: it injects the shared LightPane runtime (and sd-embed.css) once per page. Add this pane's own stylesheet and script; the pane mounts itself wherever the matching <div> is in the DOM.

<!-- In <head> — this pane's stylesheet -->
<link rel="stylesheet" href="https://lightpane.io/_pane-tests/aws/reachability/reachability.css">

<!-- Your access key (inline, or set window.lpEmbed.accessKey from your own JS) -->
<script>window.lpEmbed = { accessKey: "<your-access-key>" };</script>

<!-- Where the pane should appear -->
<div class="lp-reachability-panel" data-lp-account="<your-account-alias>"></div>

<!-- Before </body> — shared loader + this pane's script -->
<script src="https://lightpane.io/embed/lp.js"></script>
<script src="https://lightpane.io/_pane-tests/aws/reachability/reachability.js" defer></script>

Tier

Available on Builder and above.

Build notes

No outstanding build notes.