Retain relevant NAT Gateway health history with the incident record

Source facts

Microsoft’s NAT Gateway Resource Health guide says the health-history section exposes up to 30 days of events. Resource health is evaluated from the gateway endpoint’s datapath availability. The guidance also describes alerts for changes to Degraded or Unavailable states, giving operators a separate notification path from manually reviewing history. Microsoft Learn.

Applicability

Use this review when investigating an outbound-connectivity incident involving NAT Gateway. Identify the correct gateway and incident interval. Keep its resource-health observations distinct from application logs, client tests and the state of the remote destination.

DSE recommendation

DSE recommends attaching the relevant resource-health timeline to the incident record while the documented history is available. Record the resource identity and observation time, and compare the events with application symptoms. Review whether a suitable health-state alert and responsible recipient are configured. Choose incident-evidence retention according to the organization’s approved requirements.

Verification

Reconcile the retained health events with notification timestamps and representative application observations. Confirm the record identifies the gateway and time zone clearly enough for another operator to repeat the comparison. Preserve discrepancies as findings. An Available resource state should not be presented as proof that every application destination or authentication path was working.

Official references

Microsoft Learn: Azure NAT Gateway Resource Health.