A distributed
cloud computing system further includes logic, stored on non-transitory, computer-medium, that, upon execution by one or more processors, causes performance of operations including generating a first
fingerprint for the first VPC being a statistical measure of a plurality of network
metrics during a learning phase, generating a second
fingerprint for the second VPC being a statistical measure of the plurality of network
metrics during the learning phase, receiving, from the controller,
metadata pertaining to each of the first gateway and the second gateway, receiving, from each of the first gateway and the second gateway,
network data, wherein the
metadata and the
network data identify each of the plurality of constructs, the communication paths between each construct, and in which
cloud computing network each construct is deployed, detecting an anomaly in one or more network traffic
metrics of either the first VPC or the second VPC based on a comparison of received network traffic and a corresponding
fingerprint, and generating an alert that the anomaly was detected.