VPC Flow Log Overview

What Is a VPC Flow Log?

A VPC flow log records information about the traffic going to and from a VPC. VPC flow logs help you monitor network traffic, analyze network attacks, and determine whether security group and network ACL rules require modification.

VPC flow logs must be used together with the Log Tank Service (LTS). Before you create a VPC flow log, you need to create a log group and a log stream in LTS. Figure 1 shows the process for configuring VPC flow logs.

Figure 1 Configuring VPC flow logs

Notes and Constraints

• Currently, S2, Sn2, Sc2, M2, El2, Hc2, Hl1, H2, D2, I2, P1, P2, G3, Pi1, Fp1, S3, C3, M3, M3se, H3, Hl3, Hi3, His3, D3, Ir3, I3, Sn3, E3, C3ne, M3ne, G5, P2v, Ai1, C6, M6, D6, S6, C6s, C6nl, C6ie, S7, C7, M7, E7, D7, Ir7, I7, S7n, C7n, M7n and I7n ECSs support VPC flow logs.
• Each account can have up to 10 VPC flow logs in a region.