Monitoring Traffic with VPC Flow Logs
VPC Flow Logs is a service designed to help you monitor IP traffic entering and leaving the entire VPC, a specific subnet, or a specific network interface such as the virtual network card attached to one of your EC2 instances.
This data can then be ingested into Amazon CloudWatch Logs, Amazon S3, or Amazon Kinesis Data Firehose for further analysis and storage. VPC Flow Logs can be used to do the following:
- Identify overly restrictive security group rules – for example, when certain types of traffic are not reaching your resources
- Monitor the type of traffic that reaches your instances – for example, to help you determine if that traffic is authorized or malicious
- Identify the direction of the traffic to and from the resources in your AWS account
Your flow log data is recorded as flow log records and can be pushed out to a CloudWatch Logs group created beforehand. You will also need to set up the necessary...
