AWS Certified Advanced Networking - Specialty Exam Guide

VPC Flow Logs

When setting up network security with NACLs and security groups, we can sometimes get into a situation where the flow of traffic is not passing through the target as expected. In these cases, VPC Flow Logs provide us with the ability to gain a deeper understanding of the IP traffic going to and from any network interface within the VPC. The Flow Logs capture the status of each packet and the state of the packet in question. We can publish Flow Logs to CloudWatch Logs and view the VPC Flow Logs directly from the management console. We are also able to store the Flow Logs in S3 so that we can store and view the data for historical purposes.