AWS Tiros Uses Formal Reasoning to Validate Network Segmentation
Start here
AWS is using Tiros, its automated-reasoning tool, to statically check network segmentation across all modeled paths in Cloud WAN configurations, instead of relying on packet-based sampling. Tiros converts route tables, attachments and policy documents into logical propositions, then verifies that no path exists between segments the policy declares off limits, according to Amazon Science. The checks can run as often as every hour. Because the analysis covers every modeled path rather than sampled traffic, it is meant to catch segmentation violations that packet sampling could miss.
Generated from reports · updated 13 h ago
Report timeline
Follow the reports to see the event from different sides.
- Amazon ScienceUsing Mathematics to Validate Network Configurations: AWS Tiros for Segmentation Checks
AWS is using its automated-reasoning tool Tiros to statically validate network segmentation across all modeled paths, rather than relying on packet-based sampling. Tiros converts Cloud WAN configurations from route tables, attachments, and policy documents into logical propositions, then checks that no path exists between segments the policy declares off limits, with analyses run as often as every hour.
Heat for this event
Not enough continuous observations yet to draw a trend.