AWS Network Synthetic Monitor
docs.aws.amazon.com
Spec sheet
- What it does
- AWS fully manages synthetic probes that measure latency and packet loss between AWS VPC subnets and on-premises destinations.Read 15 Oct 2026 · docs.aws.amazon.com
- Purpose
- Provides visibility into network performance between AWS hosted applications and on-premises destinations and helps identify the source of degradation within minutes.Read 4 Oct 2026 · docs.aws.amazon.com
- Audience
- It is intended for network operators and application developers seeking real-time network performance insights.Read 4 Oct 2026 · docs.aws.amazon.com
- Security
- AWS describes security as a shared responsibility and says its infrastructure is regularly tested by third-party auditors as part of AWS Compliance Programs.Read 4 Oct 2026 · docs.aws.amazon.com
- Access security
- API clients must use TLS 1.0 or later, with TLS 1.2 or later recommended, and sign requests using IAM-associated credentials or temporary AWS STS credentials.Read 4 Oct 2026 · docs.aws.amazon.com
- Account requirement
- Monitor source subnets must belong to the same AWS account as the monitor.Read 15 Oct 2026 · docs.aws.amazon.com
- Agentless and PrivateLink
- No agents are installed in VPCs or on-premises; AWS PrivateLink can provide a private connection to the monitoring resources.Read 15 Oct 2026 · docs.aws.amazon.com
- AWS health indicator
- The network health indicator helps diagnose whether degradation is within AWS for paths through Direct Connect or Transit Gateway inter-Region peering, and its metric is binary, 0 or 100.Read 4 Oct 2026 · docs.aws.amazon.com
- CloudWatch integration
- Probe metrics feed CloudWatch Metrics, where users can build dashboards, thresholds and alarms.Read 15 Oct 2026 · docs.aws.amazon.com
- Company history
- AWS says it launched in 2006.Read 4 Oct 2026 · aws.amazon.com
- Connectivity integrations
- AWS describes hybrid monitoring for Direct Connect and Site-to-Site VPN, with alarms that can connect to SNS, EventBridge and Lambda workflows.Read 15 Oct 2026 · aws.amazon.com
- Continuous metrics
- The service continuously benchmarks hybrid paths with real-time packet-loss and latency measurements.Read 15 Oct 2026 · docs.aws.amazon.com
- Data protection
- AWS recommends least-privilege IAM, MFA, CloudTrail, TLS 1.2, encryption and FIPS endpoints, and warns against placing secrets in tags, names or destination URLs.Read 15 Oct 2026 · docs.aws.amazon.com
- IAM requirements
- Viewing requires CloudWatch metric-data access plus networkmonitor Get and List permissions; creation also needs service-linked-role, EC2 interface and security-group permissions.Read 15 Oct 2026 · docs.aws.amazon.com
- IP support
- On-premises destinations support IPv4 and IPv6 addresses.Read 4 Oct 2026 · docs.aws.amazon.com
- Limit: Capterra reviewers
- Capterra reviewers cite a steep learning curve, difficult log navigation and confusing or escalating costs.Read 15 Oct 2026 · capterra.com
- Limit: cost alternative
- The same experiment concluded self-built EC2 scripts can be more economical for noncritical or development monitoring.Read 15 Oct 2026 · dev.classmethod.jp
- Limit: destinations
- Reserved or AWS-internal addresses such as 169.254.0.0/16 and 10.0.0.2 produce invalid path measurements and should not be used.Read 15 Oct 2026 · docs.aws.amazon.com
- Limit: failover
- The service does not automatically fail over network traffic when AWS has a network problem.Read 15 Oct 2026 · docs.aws.amazon.com
- Limit: G2 reviewers
- G2 reviewers repeatedly mention a complex interface, difficult log queries and costs that increase with high-volume logs or custom metrics.Read 15 Oct 2026 · g2.com
- Limit: probe cost
- DevelopersIO reported probe pricing of about $0.11 per subnet-hour plus CloudWatch metrics and described the probe cost as expensive.Read 15 Oct 2026 · dev.classmethod.jp
- Limit: public IP paths
- A DevelopersIO experiment found probes cannot reach global IPs directly because their ENIs have no public IP, requiring NAT Gateway or public addressing.Read 15 Oct 2026 · dev.classmethod.jp
- Maker and ownership
- Amazon Web Services, Inc. is an Amazon.com, Inc. business segment, launched in 2006 and headquartered in Seattle, Washington.Read 15 Oct 2026 · aws.amazon.com
- Managed operation
- AWS fully manages monitoring probes, so separate agents do not need to be installed on VPCs or on-premises resources.Read 4 Oct 2026 · docs.aws.amazon.com
- Measurements
- It tracks continuous packet loss and latency for hybrid network connections.Read 4 Oct 2026 · docs.aws.amazon.com
- Network health indicator
- Its Network Health Indicator is a binary 0-or-100 CloudWatch metric estimating whether degradation is inside AWS on eligible Direct Connect or Transit Gateway inter-Region paths.Read 15 Oct 2026 · docs.aws.amazon.com
- Notable limitation
- The service does not provide automatic network failover if an AWS network issue occurs.Read 4 Oct 2026 · docs.aws.amazon.com
- Notable news
- AWS announced general availability on December 22, 2023 and announced Transit Gateway inter-Region Network Health Indicator support on September 10, 2026.Read 15 Oct 2026 · aws.amazon.com.cdn.amazon.com
- Praise: Capterra reviewers
- Capterra reviewers praise dependable AWS integration, real-time monitoring, dashboards and alarms.Read 15 Oct 2026 · capterra.com
- Praise: G2 reviewers
- G2 reviewers repeatedly praise AWS integration, centralized real-time metrics, logs, alerts and customizable dashboards.Read 15 Oct 2026 · g2.com
- Praise: implementation
- DevelopersIO found implementation relatively easy and valued visibility into otherwise hard-to-detect hybrid grey failures.Read 15 Oct 2026 · dev.classmethod.jp
- Pricing basis
- Pricing has an hourly fee per monitored AWS resource and CloudWatch metrics fees, with no upfront costs or long-term commitments.Read 4 Oct 2026 · docs.aws.amazon.com
- Pricing example
- AWS pricing illustrates 24 probes costing $432 monthly for resource hours plus $21.60 for 72 vended metrics, totaling $453.60 in the US East example.Read 15 Oct 2026 · aws.amazon.com
- Pricing structure
- AWS charges an hourly fee for monitored resources plus standard CloudWatch metric fees, with no upfront payment or long-term commitment.Read 15 Oct 2026 · docs.aws.amazon.com
- Private connectivity
- A private connection to Network Synthetic Monitor resources can be established using AWS PrivateLink.Read 4 Oct 2026 · docs.aws.amazon.com
- Probe configuration
- A probe combines a source subnet, destination IP, protocol, port and packet size, with both IPv4 and IPv6 supported.Read 15 Oct 2026 · docs.aws.amazon.com
- Probe coverage limit
- Each monitored subnet resource can have up to four probes for traffic to four destination IP addresses.Read 4 Oct 2026 · docs.aws.amazon.com
- Public API
- The API supports creating, updating, listing, retrieving and deleting monitors and probes, plus resource tagging.Read 15 Oct 2026 · docs.aws.amazon.com
- Rating on Apple App Store (AWS Console app)
- 4.7 out of 5 from 6.1K ratings; this is the AWS Console mobile app and is not a dedicated Network Synthetic Monitor app.Read 15 Oct 2026 · apps.apple.com
- Rating on Capterra (Amazon CloudWatch listing)
- 4.5 out of 5 from 95 reviews; this rating covers CloudWatch broadly rather than Network Synthetic Monitor specifically.Read 15 Oct 2026 · capterra.com
- Rating on G2 (Amazon CloudWatch listing)
- 4.3 out of 5 from 399 reviews; this rating covers CloudWatch broadly rather than Network Synthetic Monitor specifically.Read 15 Oct 2026 · g2.com
- Rating on Gartner Peer Insights (Amazon CloudWatch listing)
- 4.5 out of 5 from 749 reviews; this rating covers CloudWatch broadly rather than Network Synthetic Monitor specifically.Read 15 Oct 2026 · gartner.com
- Rating on TrustRadius (Amazon CloudWatch listing)
- 7.7 out of 10 from 180 reviews; this rating covers CloudWatch broadly rather than Network Synthetic Monitor specifically.Read 15 Oct 2026 · trustradius.com
- Regional availability
- AWS lists Network Synthetic Monitor in 31 regions, with availability varying by region.Read 15 Oct 2026 · docs.aws.amazon.com
- SDKs and CLI
- AWS publishes SDK support for .NET, C++, Go, Java, JavaScript, Kotlin, PHP, Python/Boto3 and Ruby, along with AWS CLI v2.Read 15 Oct 2026 · docs.aws.amazon.com
- Service quotas
- Default regional quotas are 100 monitors per account, 24 probes per monitor and four probes per subnet, all adjustable.Read 15 Oct 2026 · docs.aws.amazon.com
- Service-linked role
- The first monitor automatically creates AWSServiceRoleForNetworkMonitor, which can publish metrics and manage required VPC security groups and network interfaces.Read 15 Oct 2026 · docs.aws.amazon.com
- Terraform extensibility
- An independent hands-on article demonstrates Terraform resources for Network Synthetic Monitor monitors and probes.Read 15 Oct 2026 · dev.classmethod.jp
- Transport security
- API clients must support TLS 1.0 or later; AWS recommends TLS 1.2 or newer and perfect-forward-secrecy cipher suites, with IAM or temporary STS credentials signing requests.Read 15 Oct 2026 · docs.aws.amazon.com
Plans and prices
Pay as you go $0.10 a month Hourly per monitored resource; CloudWatch metrics charged separately $0.10 per monitored resource per hour in the example · each resource covers four on-premises IP addresses by default · standard CloudWatch metrics pricing applies Read 4 Oct 2026 · aws.amazon.com
Pay-as-you-go Network Synthetic Monitor $0.10 a month hourly per monitored resource; CloudWatch metrics billed separately $0.10 per monitored resource-hour in US East example · 4 destination IPs per subnet included by default · additional probes and metrics charged Read 15 Oct 2026 · aws.amazon.com
Where Specifiction places it
- Mobile App Monitoring#8 of 238.6