We need the following resources for completing the steps within this recipe:
- A CloudWatch log group. You can create a log group by following the Creating a CloudWatch log group recipe in Chapter 8, Monitoring with CloudWatch, CloudTrail, and Config.
- An IAM role with permissions to publish to the CloudWatch log group. This can be done while enabling flow logs, as we will see in this recipe.