Create and Manage VPC Flow Logs

Understand how to create and manage Amazon VPC flow logs by configuring IAM roles and policies, publishing logs to CloudWatch, and monitoring network traffic to improve your VPC visibility and security.

We'll cover the following...

Create an IAM role for publishing logs
Create a VPC flow log
- Example
- Output
Delete a VPC flow log
- Example
- Output
Practice

Having grasped the fundamentals of VPC flow logs, the next step is to learn how to create and manage them. We will create flow logs at the VPC level, enabling flow logs for the entire VPC, and then publish the logs to AWS CloudWatch.

Create an IAM role for publishing logs

To allow VPC flow logs to be published to AWS CloudWatch, the flow log must have access to and write logs to the CloudWatch log group. To grant permissions to the flow logs, we’ll create an IAMIdentity and Access Management role that the flow logs service will assume and attach the necessary permissions to it using a role policy.

Create an IAM policy

The following policy defines the permissions required to publish flow logs to AWS CloudWatch. The policy is always written in JSON in IAM.

1.Introduction

2.Network Addressing Fundamentals

3.VPC Fundamentals

4. VPC Networking and Security

5.Monitoring VPC

6.Advanced VPC Connectivity

7.Appendix

8.Conclusion

Project

Create and Manage VPC Flow Logs

Create an IAM role for publishing logs

Create an IAM policy

IAM policy for publishing logs