Logging and monitoring with GCP operations
In this section, you will learn how to enable and monitor logging on your VPC. First, we will explore how to log VPC flows. Then we will learn how to enable logging in firewall rules and monitor them. Lastly, we will enable VPC audit logs and monitor them. We will use Cloud Logging and Cloud Monitoring in the following exercises.
VPC Flow Logs
There are multiple use cases for VPC Flow Logs. For instance, when you need to determine where your application is being accessed, VPC Flow Logs can help to investigate. Moreover, when you need to build a Cloud Armor blacklist of unwanted IP addresses, VPC Flow Logs can provide such information.
Going into more detail, when you enable VPC Flow Logs on your VPC, you will be able to collect network traffic samples that are sent or received by Compute Engine instances or Google Kubernetes Engine (GKE) nodes. These logs are stored in Cloud Logging and can be used for network monitoring, network...