AWS Security Cookbook

How to do it...

We can configure VPC flow logs from the console as follows:

1. Go to VPC service in the console.
2. Click on Your VPCs.
3. Select our VPC.
4. Click on the Flow Logs tab.
5. Click on Create flow log.
6. Within the Filter dropdown, select All.
7. Set Destination to Send to CloudWatch Logs.

8. Select Destination log group as the log group we created in the Getting ready section.
9. Open the Set Up Permissions link against the IAM Role option in a new tab (or page), as follows:

10. Click Allow to create the new role.

11. From the Create flow log tab (or page), click the refresh button against the IAM role and select the role that we created in the previous ...