AWS

Reachability

VPC Reachability Analyzer paths — proof that one resource can or cannot reach another.

Tier Builder

Category Networking

Refresh every 30 min

Scope regional

Live preview — demo data

What this pane shows

Existing Reachability Analyzer paths (and the option to launch new ones) showing whether traffic from a source ENI / instance can reach a destination, with the full path AWS computed: security groups, NACLs, route tables, peering connections, transit gateways. Includes the reason any leg is blocked.

Key use cases

Debug "why can't this app reach the database?" without trial-and-error.
Prove a private subnet really is isolated from the internet.
Confirm a security-group change didn't break legitimate traffic.
Audit accidentally-permissive paths between resources.

How to embed

Drop this snippet on any HTML page that loads lp-embed.js. The pane mounts itself wherever the matching <div> is in the DOM.

<div class="lp-reachability-panel"
     data-lp-account="<your-account-alias>"></div>
<script src="https://lightpane.io/embed/lp-embed.js"
        data-lp-key="<your-access-key>"></script>
<script src="https://lightpane.io/_pane-tests/aws/reachability/reachability.js"
        defer></script>

Tier

Available on Builder and above.

Build notes

No outstanding build notes.