Skip to content
SPECIFICTION
Get listed

AWS Network Synthetic Monitor

docs.aws.amazon.com

From $0.10/mo WebAPI

Spec sheet

What it does
AWS fully manages synthetic probes that measure latency and packet loss between AWS VPC subnets and on-premises destinations.Read 15 Oct 2026 · docs.aws.amazon.com
Purpose
Provides visibility into network performance between AWS hosted applications and on-premises destinations and helps identify the source of degradation within minutes.Read 4 Oct 2026 · docs.aws.amazon.com
Audience
It is intended for network operators and application developers seeking real-time network performance insights.Read 4 Oct 2026 · docs.aws.amazon.com
Security
AWS describes security as a shared responsibility and says its infrastructure is regularly tested by third-party auditors as part of AWS Compliance Programs.Read 4 Oct 2026 · docs.aws.amazon.com
Access security
API clients must use TLS 1.0 or later, with TLS 1.2 or later recommended, and sign requests using IAM-associated credentials or temporary AWS STS credentials.Read 4 Oct 2026 · docs.aws.amazon.com
Account requirement
Monitor source subnets must belong to the same AWS account as the monitor.Read 15 Oct 2026 · docs.aws.amazon.com
Agentless and PrivateLink
No agents are installed in VPCs or on-premises; AWS PrivateLink can provide a private connection to the monitoring resources.Read 15 Oct 2026 · docs.aws.amazon.com
AWS health indicator
The network health indicator helps diagnose whether degradation is within AWS for paths through Direct Connect or Transit Gateway inter-Region peering, and its metric is binary, 0 or 100.Read 4 Oct 2026 · docs.aws.amazon.com
CloudWatch integration
Probe metrics feed CloudWatch Metrics, where users can build dashboards, thresholds and alarms.Read 15 Oct 2026 · docs.aws.amazon.com
Company history
AWS says it launched in 2006.Read 4 Oct 2026 · aws.amazon.com
Connectivity integrations
AWS describes hybrid monitoring for Direct Connect and Site-to-Site VPN, with alarms that can connect to SNS, EventBridge and Lambda workflows.Read 15 Oct 2026 · aws.amazon.com
Continuous metrics
The service continuously benchmarks hybrid paths with real-time packet-loss and latency measurements.Read 15 Oct 2026 · docs.aws.amazon.com
Data protection
AWS recommends least-privilege IAM, MFA, CloudTrail, TLS 1.2, encryption and FIPS endpoints, and warns against placing secrets in tags, names or destination URLs.Read 15 Oct 2026 · docs.aws.amazon.com
IAM requirements
Viewing requires CloudWatch metric-data access plus networkmonitor Get and List permissions; creation also needs service-linked-role, EC2 interface and security-group permissions.Read 15 Oct 2026 · docs.aws.amazon.com
IP support
On-premises destinations support IPv4 and IPv6 addresses.Read 4 Oct 2026 · docs.aws.amazon.com
Limit: Capterra reviewers
Capterra reviewers cite a steep learning curve, difficult log navigation and confusing or escalating costs.Read 15 Oct 2026 · capterra.com
Limit: cost alternative
The same experiment concluded self-built EC2 scripts can be more economical for noncritical or development monitoring.Read 15 Oct 2026 · dev.classmethod.jp
Limit: destinations
Reserved or AWS-internal addresses such as 169.254.0.0/16 and 10.0.0.2 produce invalid path measurements and should not be used.Read 15 Oct 2026 · docs.aws.amazon.com
Limit: failover
The service does not automatically fail over network traffic when AWS has a network problem.Read 15 Oct 2026 · docs.aws.amazon.com
Limit: G2 reviewers
G2 reviewers repeatedly mention a complex interface, difficult log queries and costs that increase with high-volume logs or custom metrics.Read 15 Oct 2026 · g2.com
Limit: probe cost
DevelopersIO reported probe pricing of about $0.11 per subnet-hour plus CloudWatch metrics and described the probe cost as expensive.Read 15 Oct 2026 · dev.classmethod.jp
Limit: public IP paths
A DevelopersIO experiment found probes cannot reach global IPs directly because their ENIs have no public IP, requiring NAT Gateway or public addressing.Read 15 Oct 2026 · dev.classmethod.jp
Maker and ownership
Amazon Web Services, Inc. is an Amazon.com, Inc. business segment, launched in 2006 and headquartered in Seattle, Washington.Read 15 Oct 2026 · aws.amazon.com
Managed operation
AWS fully manages monitoring probes, so separate agents do not need to be installed on VPCs or on-premises resources.Read 4 Oct 2026 · docs.aws.amazon.com
Measurements
It tracks continuous packet loss and latency for hybrid network connections.Read 4 Oct 2026 · docs.aws.amazon.com
Network health indicator
Its Network Health Indicator is a binary 0-or-100 CloudWatch metric estimating whether degradation is inside AWS on eligible Direct Connect or Transit Gateway inter-Region paths.Read 15 Oct 2026 · docs.aws.amazon.com
Notable limitation
The service does not provide automatic network failover if an AWS network issue occurs.Read 4 Oct 2026 · docs.aws.amazon.com
Notable news
AWS announced general availability on December 22, 2023 and announced Transit Gateway inter-Region Network Health Indicator support on September 10, 2026.Read 15 Oct 2026 · aws.amazon.com.cdn.amazon.com
Praise: Capterra reviewers
Capterra reviewers praise dependable AWS integration, real-time monitoring, dashboards and alarms.Read 15 Oct 2026 · capterra.com
Praise: G2 reviewers
G2 reviewers repeatedly praise AWS integration, centralized real-time metrics, logs, alerts and customizable dashboards.Read 15 Oct 2026 · g2.com
Praise: implementation
DevelopersIO found implementation relatively easy and valued visibility into otherwise hard-to-detect hybrid grey failures.Read 15 Oct 2026 · dev.classmethod.jp
Pricing basis
Pricing has an hourly fee per monitored AWS resource and CloudWatch metrics fees, with no upfront costs or long-term commitments.Read 4 Oct 2026 · docs.aws.amazon.com
Pricing example
AWS pricing illustrates 24 probes costing $432 monthly for resource hours plus $21.60 for 72 vended metrics, totaling $453.60 in the US East example.Read 15 Oct 2026 · aws.amazon.com
Pricing structure
AWS charges an hourly fee for monitored resources plus standard CloudWatch metric fees, with no upfront payment or long-term commitment.Read 15 Oct 2026 · docs.aws.amazon.com
Private connectivity
A private connection to Network Synthetic Monitor resources can be established using AWS PrivateLink.Read 4 Oct 2026 · docs.aws.amazon.com
Probe configuration
A probe combines a source subnet, destination IP, protocol, port and packet size, with both IPv4 and IPv6 supported.Read 15 Oct 2026 · docs.aws.amazon.com
Probe coverage limit
Each monitored subnet resource can have up to four probes for traffic to four destination IP addresses.Read 4 Oct 2026 · docs.aws.amazon.com
Public API
The API supports creating, updating, listing, retrieving and deleting monitors and probes, plus resource tagging.Read 15 Oct 2026 · docs.aws.amazon.com
Rating on Apple App Store (AWS Console app)
4.7 out of 5 from 6.1K ratings; this is the AWS Console mobile app and is not a dedicated Network Synthetic Monitor app.Read 15 Oct 2026 · apps.apple.com
Rating on Capterra (Amazon CloudWatch listing)
4.5 out of 5 from 95 reviews; this rating covers CloudWatch broadly rather than Network Synthetic Monitor specifically.Read 15 Oct 2026 · capterra.com
Rating on G2 (Amazon CloudWatch listing)
4.3 out of 5 from 399 reviews; this rating covers CloudWatch broadly rather than Network Synthetic Monitor specifically.Read 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights (Amazon CloudWatch listing)
4.5 out of 5 from 749 reviews; this rating covers CloudWatch broadly rather than Network Synthetic Monitor specifically.Read 15 Oct 2026 · gartner.com
Rating on TrustRadius (Amazon CloudWatch listing)
7.7 out of 10 from 180 reviews; this rating covers CloudWatch broadly rather than Network Synthetic Monitor specifically.Read 15 Oct 2026 · trustradius.com
Regional availability
AWS lists Network Synthetic Monitor in 31 regions, with availability varying by region.Read 15 Oct 2026 · docs.aws.amazon.com
SDKs and CLI
AWS publishes SDK support for .NET, C++, Go, Java, JavaScript, Kotlin, PHP, Python/Boto3 and Ruby, along with AWS CLI v2.Read 15 Oct 2026 · docs.aws.amazon.com
Service quotas
Default regional quotas are 100 monitors per account, 24 probes per monitor and four probes per subnet, all adjustable.Read 15 Oct 2026 · docs.aws.amazon.com
Service-linked role
The first monitor automatically creates AWSServiceRoleForNetworkMonitor, which can publish metrics and manage required VPC security groups and network interfaces.Read 15 Oct 2026 · docs.aws.amazon.com
Terraform extensibility
An independent hands-on article demonstrates Terraform resources for Network Synthetic Monitor monitors and probes.Read 15 Oct 2026 · dev.classmethod.jp
Transport security
API clients must support TLS 1.0 or later; AWS recommends TLS 1.2 or newer and perfect-forward-secrecy cipher suites, with IAM or temporary STS credentials signing requests.Read 15 Oct 2026 · docs.aws.amazon.com

Plans and prices

Pay as you go $0.10 a month Hourly per monitored resource; CloudWatch metrics charged separately $0.10 per monitored resource per hour in the example · each resource covers four on-premises IP addresses by default · standard CloudWatch metrics pricing applies Read 4 Oct 2026 · aws.amazon.com
Pay-as-you-go Network Synthetic Monitor $0.10 a month hourly per monitored resource; CloudWatch metrics billed separately $0.10 per monitored resource-hour in US East example · 4 destination IPs per subnet included by default · additional probes and metrics charged Read 15 Oct 2026 · aws.amazon.com

Every AWS Network Synthetic Monitor plan and price →

Where Specifiction places it

Alternatives to AWS Network Synthetic MonitorAll alternatives →