Auditing and Logging

Auditing

Cloud Trace Service (CTS) records operations on cloud resources in your account. You can use the logs to perform security analysis, track resource changes, audit compliance, and locate faults.

After CTS is enabled, it can record VPC operations.

• If you want to enable and configure CTS, refer to CTS Getting Started.
• If you want to know supported operations on VPCs, refer to Supported VPC Operations.
• If you want to view traces, refer to Viewing Traces.

Logging

A VPC flow log records information about traffic going to and from your VPC. VPC flow logs help you monitor network traffic, analyze network attacks, and determine whether security group and network ACL rules require modification.

• VPC Flow Log Overview
• Creating a VPC Flow Log