Enabling VPC flow logs

VPC flow logs is a feature which helps in capturing information about the IP network traffic going to and from the VPC. This information can be used for troubleshooting connectivity and security. All the logs are stored in CloudWatch logs. You can also trigger an alarm for certain use cases or threats. 

Getting ready

You will need access to the VPC and CloudWatch.

How to do it...

1. Log in to the AWS Console and then select VPC.
   1. Select your VPC | Actions | Create Flow Log.

Create Flow Log

1. 2. Click Create Flow Log.

Create Flow Log

1. 3. Create a role if it's not already there by selecting Set Up Permissions.

Create Flow Log

1. 4. Navigate to Flow Logs in the lower pane.

Navigate Flow Log

1. 5. Flow Logs will appear in the Cloudwatch Logs.

Check Flow Log in CloudWatch

There's more...

• Flow logs will not include the following traffic:
  • VPC flow logs support network interfaces created in VPC only, that is, EC2-classic links are not supported.
  • Traffic to or from DNS servers.
  • Windows license activation traffic.
  • Traffic...