Amazon patents tool to check if cloud networks match their design plans

1. A system comprising: a cloud provider network comprising a plurality of endpoints and a plurality of routers, wherein the plurality of routers are configured to route network traffic between the plurality of endpoints; and a network analysis system comprising one or more computing devices, each computing device comprising one or more computer processors and computer-readable memory storing executable instructions, wherein the network analysis system is programmed to at least: obtain policy data from which a software defined wide area network is to be deployed on the cloud provider network, wherein the software defined wide area network connects two or more client on-premise networks to each other via the cloud provider network; determine, using the policy data, a plurality of implementation operations to be performed to deploy the software defined wide area network; deploy the software defined wide area network in the cloud provider network using the plurality of implementation operations; generate a first model of the software defined wide area network based on the policy data without review of the software defined wide area network as deployed, wherein the first model is a first graphical representation of the software defined wide area network as specified in the policy data, and wherein the first graphical representation exhibits a first set routes between endpoints of the plurality of endpoints as specified in the policy data; generate a second model of the software defined wide area network, wherein the second model is a second graphical representation of the software defined wide area network as deployed in the cloud provider network, and wherein the second graphical representation exhibits a second set of routes between endpoints of the plurality of endpoints as deployed in the cloud provider network; compare the first model to the second model to determine whether the first model includes the second set of routes as deployed in the cloud provider network from the second model; and using the comparison of the first model to the second model, identify a discrepancy between the first model and the second model.