The Flow Logs tab allows you to set up and configure flow logs. These allow you to capture IP traffic sent between the network interfaces of your subnet. Flow logs can also be configured at the VPC level and for each of your network interfaces on your instances. However, this tab will only configure flow logs for this particular subnet. The data captured in these logs can help you resolve incidents relating to network communication issues and traffic flow. They are also useful to help identify traffic that shouldn't be traversing the network, so from a security stance, they are also very useful for IP traffic analysis. All flow log data is captured within CloudWatch Logs.Â
Flow logs will be covered in greater detail in Chapter 12, Implementing Logging Mechanisms.
