Network monitoring & diagnostics
VPC Reachability Analyzer and Network Access Analyzer vs Azure Network Watcher
VPC Reachability Analyzer and Network Access Analyzer map to Azure Network Watcher tools such as connection troubleshoot, IP flow verify, next hop, and effective security rules.
Side-by-side comparison
| Aspect | Amazon Web Services | Microsoft Azure |
|---|---|---|
| Service | VPC Reachability Analyzer and Network Access Analyzer | Azure Network Watcher |
| Lifecycle | Generally available | Generally available |
| What it is | Reachability Analyzer checks whether a path exists between two resources by analyzing configuration. Network Access Analyzer finds unintended network access against rules you define. | Network monitoring and diagnostics, including connection troubleshoot, IP flow verify, next hop, effective security rules, packet capture, connection monitor, and topology. |
| Pricing model | Per analysis. | Per diagnostic check and connection monitor test (with free monthly amounts). |
| Docs | VPC Reachability Analyzer and Network Access Analyzer docs | Azure Network Watcher docs |
| Pricing page | VPC Reachability Analyzer and Network Access Analyzer pricing | Azure Network Watcher pricing |
| Exams | ANS-C01 Retiring SOA-C03 | AZ-104 AZ-700 |
Key differences
- Method. Reachability Analyzer analyzes configuration without sending packets and explains which component blocks a path. Network Watcher combines configuration checks (IP flow verify, next hop, effective rules) with active tests (connection troubleshoot, connection monitor) and packet capture.
- Audit. Network Access Analyzer checks for unintended access across your network against scopes you define. Azure has no single equivalent, so you combine Network Watcher, Azure Policy, and Defender for Cloud.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Per analysis. VPC Reachability Analyzer and Network Access Analyzer pricing →
- Azure
- Per diagnostic check and connection monitor test (with free monthly amounts). Azure Network Watcher pricing →
Certification exam mapping
| Exam | Provider | Level | Status |
|---|---|---|---|
| AWS Certified Advanced Networking – Specialty ANS-C01 | AWS | Specialty | retiring The exam is being retired. The last day to take it is Dec 31, 2026. Existing certifications stay active for their three-year period. |
| AWS Certified CloudOps Engineer – Associate SOA-C03 | AWS | Associate | current Replaces AWS Certified SysOps Administrator – Associate (SOA-C02), whose last exam day was Sep 29, 2025. Simplified Chinese and Korean versions retire after Nov 19, 2026. |
| Microsoft Certified – Azure Administrator Associate AZ-104 | Azure | Associate | current |
| Microsoft Certified – Azure Network Engineer Associate AZ-700 | Azure | Associate | current |
Relevance is based on each exam's published scope, not a line-by-line objective match. Check the official study guide.
FAQ
What is the Azure equivalent of VPC Reachability Analyzer and Network Access Analyzer?
VPC Reachability Analyzer and Network Access Analyzer map to Azure Network Watcher tools such as connection troubleshoot, IP flow verify, next hop, and effective security rules.
How does pricing compare between VPC Reachability Analyzer and Network Access Analyzer and Azure Network Watcher?
AWS: Per analysis. Azure: Per diagnostic check and connection monitor test (with free monthly amounts). Check the official pricing pages for current rates.
Which certification exams cover this topic?
AWS Certified Advanced Networking – Specialty (ANS-C01) [retiring]; AWS Certified CloudOps Engineer – Associate (SOA-C03); Microsoft Certified – Azure Administrator Associate (AZ-104); Microsoft Certified – Azure Network Engineer Associate (AZ-700).