Detect Changes
See meaningful AWS network configuration changes as they are detected.
Network Change Assurance for AWS + Terraform
Catch AWS Network Regressions
Before They Reach Production.
PingTraceSSH models your AWS network, validates critical network paths, and checks proposed Terraform changes for routing regressions before deployment.
14 days free · No credit card required · Read-only AWS access
Pre-Change Assurance · Before deployment
See the Impact Before Terraform Applies It.
PingTraceSSH analyzes supported Terraform network changes against your current AWS network and Critical Paths before deployment — naming the affected Critical Path, the responsible Terraform resource, and the route-level reason, with a SAFE, REGRESSION, or INCONCLUSIVE result.
With HCP Terraform Run Tasks, a Mandatory assurance check can stop a failed network change before apply. PingTraceSSH never writes to your Terraform or AWS infrastructure.
Example Terraform analysis
HCP Terraform · MandatoryREGRESSION
network regressionproduction-network · 1 / 2 Critical Paths reachable in the proposed state
lab-a-to-lab-bREGRESSION
CURRENT:PASS→PROPOSED:FAIL
Transit Gateway route to 10.0.0.0/16 is missing.
Terraform resource: aws_ec2_transit_gateway_route.b_via_inspection
Action: DELETE
Run Task failed
Apply blocked
Mandatory enforcement returns the failed assurance result to HCP Terraform before apply.
Callback DELIVERED
View run in HCP Terraform
Example analysis using supported Terraform assurance fields. No customer plan data is shown.
How it works
How PingTraceSSH Works
- STEP 1
Connect AWS
Use read-only AWS cross-account access with STS AssumeRole and a customer-specific External ID.
- STEP 2
Map the Network
PingTraceSSH discovers supported AWS networking resources and builds your current network model.
- STEP 3
Define Critical Paths
Identify the network paths that matter most to your environment.
- STEP 4
Validate Changes
Detect changes in AWS and evaluate supported Terraform changes before deployment.
Post-Change Assurance · After deployment
Know What Changed Before It Becomes an Outage.
Detect AWS network changes and continuously validate the network paths your infrastructure depends on — topology, changes, Critical Paths, and post-change assurance in one view.
AWS + hybrid network
Example EnvironmentChange impact pathRegression detected
Internet
Internet Gateway
igw-0b21
Prod VPC
10.20.0.0/16
Shared Services
10.30.0.0/16
Transit Gateway
Route changed · 14m ago
VPN / Direct Connect
BLACKHOLE
On-Prem Data Center
UNREACHABLE
Change detected
Transit Gateway Route Table
tgw-rtb-0941
Before10.42.0.0/16 → vpn-31f2After10.42.0.0/16 → blackholeChanged14 minutes ago
Connectivity impact
Prod VPCOn-Prem
Unreachable
Potential cause: Transit Gateway route change
Before · reachable
After · unreachable
Example infrastructure and sample network event shown for demonstration.
Validate Critical Paths
Continuously validate the network paths your infrastructure depends on.
Understand Impact
See which network relationships may have been affected.
Read-Only by Design.
- Read-only AWS access
- AWS STS AssumeRole
- Customer-specific External ID
- No customer AWS access keys stored
Who it's for
Built for AWS Infrastructure Teams
PingTraceSSH is designed for teams managing AWS networks where a routing mistake can affect important infrastructure.
- Multiple VPCs
- AWS Transit Gateway
- Terraform-managed networking
- Hybrid AWS connectivity
- Critical application or infrastructure paths
- Network, cloud, platform, or infrastructure engineering teams
PingTraceSSH Cloud
$299/month
Network Change Assurance for AWS + Terraform.
14-Day Free Trial. No credit card required. Validate PingTraceSSH against your real AWS network for 14 days — the clock starts when your first AWS account connects.
Built by a network engineer with more than a decade of experience working with enterprise networking, routing, firewalls, WAN infrastructure, and cloud connectivity. About PingTraceSSH
Make Network Changes With More Confidence.
Try PingTraceSSH Cloud against your own AWS environment before subscribing. 14 days free. No credit card required.