After a route change, an EC2 instance cannot connect to a database. The engineer wants a configuration-based analysis identifying blocking network components without sending test packets. Which tool fits?

1. VPC Reachability Analyzer.
2. An S3 inventory report.
3. Route 53 domain registration lookup.
4. CloudWatch CPU utilization for the database only.