Configuring and using VPC flow logs

In this recipe, we will enable flow logs at the VPC level.

Getting ready

We need the following resources for completing the steps within this recipe:

• A CloudWatch log group. You can create a log group by following the Creating a CloudWatch log group recipe in Chapter 8, Monitoring with CloudWatch, CloudTrail, and Config.
• An IAM role with permissions to publish to the CloudWatch log group. This can be done while enabling flow logs, as we will see in this recipe.

How to do it...

We can configure VPC flow logs from the console as follows...