Cloud-Native Product Public Internet Egress Diagnostics

Diagnose whether an Alibaba Cloud cloud-native product instance (MSE gateway, cloud-native API gateway, AI gateway, SAE application, FC function) can reach the public internet. The flow queries the instance to obtain its bound VPC and vSwitch, then checks whether that vSwitch has a NAT gateway SNAT public egress.

Execution Principle

MANDATORY:

• Read-only: this skill only queries and reports. It never creates, modifies, or deletes any resource.
• Single entry point: all cloud queries MUST be executed through scripts/cloud_native_internet_diag.py. Do not hand-assemble CLI command chains or inline Python.
• Single-resource scope: only the instance / application / function explicitly provided by the user is queried. No scanning, enumeration, or probing of other resources.
• Fail fast: if the script exits non-zero, stop and report the error. Do not retry with ad-hoc CLI variants.
• Strict sequencing: steps below run in order; any step failure aborts the diagnosis with the error preserved.

Prerequisites (Runtime and aliyun CLI Version)