Cloud Equivalents

Microsoft Azure → Amazon Web Services

AWS equivalent of Azure Network Watcher

The closest AWS equivalents of Azure Network Watcher are VPC Reachability Analyzer and Network Access Analyzer and VPC Traffic Mirroring.

Last verified: · Edit on GitHub

About Azure Network Watcher

ProviderMicrosoft Azure
StatusGenerally available
What it isNetwork monitoring and diagnostics, including connection troubleshoot, IP flow verify, next hop, effective security rules, packet capture, connection monitor, and topology.
Documentationlearn.microsoft.com
PricingOfficial pricing page

AWS mappings (2)

Network monitoring & diagnostics(2)

Network path and access analysis Partial match

VPC Reachability Analyzer and Network Access Analyzer map to Azure Network Watcher tools such as connection troubleshoot, IP flow verify, next hop, and effective security rules.

  • Method. Reachability Analyzer analyzes configuration without sending packets and explains which component blocks a path. Network Watcher combines configuration checks (IP flow verify, next hop, effective rules) with active tests (connection troubleshoot, connection monitor) and packet capture.
  • Audit. Network Access Analyzer checks for unintended access across your network against scopes you define. Azure has no single equivalent, so you combine Network Watcher, Azure Policy, and Defender for Cloud.

Full comparison →

Packet mirroring Partial match

VPC Traffic Mirroring maps to Azure virtual network TAP, which was in public preview in select regions when verified. For one-off captures, Network Watcher packet capture is generally available.

  • Status. VPC Traffic Mirroring is generally available. Virtual network TAP is in preview with limitations (for example, VMs behind a Basic Load Balancer can't be sources).
  • Filters. Traffic Mirroring supports filters and session priorities. Check the preview docs for current virtual network TAP filtering options.

Full comparison →