Cloud Insights Topology
The Cloud Insights > Topology screen builds an interactive map from your cloud inventory data. Use the topology to understand how cloud network resources connect across your accounts and regions, locate isolated resources, and inspect resource configuration at a selected point in time.
Choosing the Appropriate Topology
Use Cloud Insights > Topology to explore the high-level relationships discovered from your cloud inventory without selecting a synthetic test. The topology includes network resources such as VPCs, transit gateways, Direct Connect gateways, and Direct Connect virtual interfaces (VIFs). It does not include finer-grained resources such as load balancers, security groups, access control lists (ACLs), or instances.
Use Network & App Synthetics > Views > Cloud layer > Topology when you need the finer-grained cloud path associated with a selected test. The standalone Cloud Insights topology answers, "How are my high-level cloud resources connected?" The test-centric Cloud layer topology answers, "Which cloud path is associated with this test?"
The standalone topology does not display test coverage, traffic, event, alert, or configuration-change overlays. It displays inventory-derived topology and the resource configuration available for the selected snapshot. For information about the test-centric Cloud layer workflow, see Cloud Insights Views.
Topology View Prerequisites
Cloud Insights must have current data from at least one AWS inventory integration. For information about configuring integrations, see Cloud Insights Integrations.
Opening the Topology View
Select Cloud Insights > Topology.
If necessary, select the accounts, regions, and point in time that you want to inspect.
By default, Account and Region are set to All, and the date and time selector uses the latest five-minute interval. If the selected interval has no topology data, try a different interval. For more information, see Selecting Intervals.
Viewing Your Topology
The graph displays your discovered AWS network resources as nodes and their inventory-derived relationships as connections.
Resource node
Represents one cloud network resource. The icon identifies the resource type and the label identifies the resource. Hover over the node to view information such as the resource ID, region, and CIDR block, when available. Select the node to open the Resource Details panel. See Viewing Resource Details.
Grouped node
Represents a collapsed group of similar resources and displays the number of resources in the group. Select the group to expand it. Use Expand All to expand all groups, Undo to reverse the last graph action, or Reset to Default to restore the default layout.
Disconnected node
Represents a resource that Cloud Insights discovered in inventory but could not connect through the relationship types represented in the selected scope and interval. The resource might be isolated, outside the selected scope or interval, or connected by a relationship that this topology does not represent. A disconnected node does not necessarily indicate a fault.
Connection
Represents an inventory-derived relationship between resources. A connection does not represent traffic flow or confirm reachability. A z marker identifies a cross-region relationship, such as eu-central-1 to us-east-1; a connection without the marker connects nodes within the same region. Hover over a connection to view the connected nodes' regions and resource IDs.
Displaying Node Descriptions
Turn on Node descriptions to display additional information, such as the region and account, beneath node labels. Turn it off to reduce visual density in a crowded graph.
Filtering the Topology View
Filtering Scope
Use the Account and Region selectors to limit the resources in the graph. Both selectors support multiple selections and search.
Select Account or Region.
Scroll through the list or search for a value.
Select one or more values.
Use All or Selected in the selector to switch between the full list and your current selections.
Selecting Intervals
Use the date and time selector to view the topology snapshot for a specific five-minute interval. You can view earlier snapshots to compare how resource relationships appeared at different points in time. For example, check an earlier interval if you know when a configuration change might have altered a resource relationship.
Select the date and time dropdown above the graph.
Select a date.
Select an available time.
The selector displays the applicable time zone.
You cannot select a future date or an interval later than the current five-minute period.
Understanding Topology Availability Across Intervals
Some five-minute intervals might not contain a topology snapshot. Cloud provider inventory collections run independently and can take longer than one interval to complete. The topology is available after Cloud Insights receives the collections required to build the snapshot.
As a result, the topology can appear, disappear, and reappear as you move between adjacent intervals. An empty interval does not necessarily mean that resources were removed or that the integration stopped working. Select a preceding or following interval to view topology data. If several consecutive intervals are empty, see Troubleshooting an Empty or Incomplete Topology.
Searching for Resources
Use search to find and highlight matching resources. Resources that do not match are dimmed.
In the search bar, select an exact suggestion or create a contains rule for Anything, Asset Name, Entity ID, Account, or Region.
Contains rule suggestions for a topology search Add more search criteria as needed.
Select All to require every criterion or Any to match at least one criterion.
The search bar displays the number of matches. Select the X on a criterion to remove it, or select the X at the end of the search field to clear all criteria.
Navigating the Graph
Drag an empty area of the graph to pan.
Use the plus (+) and minus (-) controls to zoom.
Select the home button above the zoom controls to return to the default position and zoom level.
Scroll vertically when the graph extends beyond the visible area.
Viewing Resource Details
Select a resource node to open the Resource Details panel.
Select the Config tab to inspect the configuration received from the cloud provider.
Select the Additional Details tab to view more resource information such as Resource Creation Time, Account, and Availability Zone. Available fields depend on the resource type.
If available, select Explore In AWS to open the resource in your AWS console.
Troubleshooting an Empty or Incomplete Topology
Confirm that the expected resources appear in Cloud Insights > Inventory. If current inventory data is unavailable, review the integration configuration and status.
Select a different five-minute interval.
Set Account and Region to All.
Clear the search criteria and select Reset to Default.
Last updated