AWS AmazonCloudWatch documentation change
Summary
Clarified Network Health Indicator (NHI) limitations for networks using Cloud WAN or Transit Gateway
Security assessment
Technical clarification about metric accuracy, not directly security-related. Helps prevent misconfiguration but does not address vulnerabilities.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/nw-monitor-how-it-works.md b/AmazonCloudWatch/latest/monitoring/nw-monitor-how-it-works.md index 4ae3053bf..1db229be7 100644 --- a//AmazonCloudWatch/latest/monitoring/nw-monitor-how-it-works.md +++ b//AmazonCloudWatch/latest/monitoring/nw-monitor-how-it-works.md @@ -57 +57 @@ TCP-based probes carry TCP SYN packets from your AWS hosted resources to the des -Network Synthetic Monitor publishes a network health indicator (NHI) metric that provides information on issues with the AWS network for paths that include destinations connected through AWS Direct Connect. NHI is not supported for AWS Direct Connect attachments that are created using Cloud WAN or that use AWS Transit Gateway. The NHI binary value is based on a statistical measure of the health of the AWS-controlled network path from the AWS hosted resource, where the monitor is deployed, to the Direct Connect location. +Network Synthetic Monitor publishes a network health indicator (NHI) metric that provides information on issues with the AWS network for paths that include destinations connected through AWS Direct Connect. @@ -59 +59,3 @@ Network Synthetic Monitor publishes a network health indicator (NHI) metric that -Network Synthetic Monitor uses anomaly detection to calculate availability drops or lower performance along the network paths. +The NHI binary value is based on a statistical measure of the health of the AWS-controlled network path from the AWS hosted resource, where the monitor is deployed, to the Direct Connect location. Network Synthetic Monitor uses anomaly detection to calculate availability drops or lower performance along the network paths. + +NHI is not accurate for AWS Direct Connect attachments that use intermediary routing, such as connections that are created using Cloud WAN or that use AWS Transit Gateway. When you have a hybrid network that includes AWS Transit Gateway or other intermediary routing segments, do not use the NHI value as an indication of a performance issue.