Question

A company operates a global network built on multiple Transit Gateways across three AWS Regions, several Site-to-Site VPN connections, and two Direct Connect gateways spanning many accounts. The network operations team currently logs into each account and Region separately to check attachment states and route propagation, which delays incident response. They want a single, centralized visualization of the entire cross-Region topology and the ability to be alerted when a TGW attachment or route-table state changes, without deploying custom polling scripts. Which solution best meets these requirements?

Accepted Answer

Create an AWS Network Manager global network, register the Transit Gateways, and use its topology view together with CloudWatch Events/EventBridge notifications for state changes.

Answer

Enable VPC Flow Logs on every attachment ENI and build a QuickSight dashboard that joins the logs across accounts to infer topology.

Answer

Schedule Reachability Analyzer path analyses between all attachment pairs in each Region and aggregate the results into an S3 bucket.

Answer

Deploy a Lambda function in each account that calls the EC2 DescribeTransitGatewayAttachments API on a cron schedule and writes results to a shared DynamoDB table.