Network diagnosis
Trace AWS/EKS connectivity failures, unhealthy targets, DNS errors, and IP exhaustion.
Workflow
Define source, destination, protocol, port, and expected path. Check endpoints and service selection; inspect CNI allocation, route tables, SG/NACL rules, network policies, load-balancer health, DNS, and private endpoints.
Coverage
VPC CNI/IPAMD; ENI/subnet capacity; ALB/NLB target groups; CoreDNS and upstream resolution; pod-to-service and cross-VPC access; security group and route constraints.
Reporting and boundaries
Use observed path evidence before remediation. Security-group changes follow the repository IaC policy; broad public ingress is not a diagnostic shortcut.
The source skill contains the command playbooks, decision trees, examples, reference files, and host/team integration. Consult it for the exact operation being performed.