Project Task – Create a VPC Flow Log
The Todo List application is deployed in a VPC across a fleet of AWS Fargate container services. The application running on those containers makes calls to an Amazon RDS database also hosted in the same VPC in the private subnets.
The VPC has been configured by following specific best practice guidelines, incorporating security protocols and rules to ensure that only specific types of traffic are permitted into the network.
In this project exercise, you will create a VPC flow log and have the log data ingested into CloudWatch Logs. VPC Flow Logs enables you to capture IP packet information going to and from network interfaces in your VPC. The information provides insights into the source of the IP traffic, the destination IP address, the source port, the destination port, the protocol used, and whether the packet was accepted or rejected.
When you publish your flow logs into CloudWatch Logs, the log data is published to a log group...
