Determining reachability of objects deployed in a cloud environment from to external network

A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process for determining reachability of objects deployed in a cloud environment to an external network, comprising:

• identifying a plurality of network paths in the cloud environment, wherein each network path includes at least two objects deployed in the cloud environment;
• statistically analyzing each object in each respective network path to determine its reachability properties;
• analyzing the reachability properties determined for each object to determine if the respective object is reachable through its respective network path from at least a network external to the cloud environment;
• and
• saving each object together with its respective network path and reachability properties in a database.

A system for reachability of objects deployed in a cloud environment to an external network, comprising:

• a processing circuitry;
• and
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• identify a plurality of network paths in the cloud environment, wherein each network path includes at least two objects deployed in the cloud environment;
• statistically analyze each object in each respective network path to determine its reachability properties;
• analyze the reachability properties determined for each object to determine if the respective object is reachable through its respective network path from at least a network external to the cloud environment;
• and
• save each object together with its respective network path and reachability properties in a database.