Creating a flow log is simple and can be done from the AWS Management Console. We'll create this and then decide whether to store it in Amazon S3 or CloudWatch, as well as understanding its format. So, let's begin:
- From within the VPC dashboard of the AWS Management Console, select Subnets:
- Select the subnet that you would like a flow log created for. At the bottom of the screen in the information pane, select the Flow Logs tab:
- Select the blue Create flow log button (seen in the preceding screenshot).
- From here, you can configure the traffic that you want your flow log to capture. Using the Filter drop-down list, you can select either Accept, Reject, or All. This determines which traffic is to be recorded within the log.
- Under the Destination option, you can choose to have the flow log data sent to either Amazon S3 or CloudWatch Logs. If you were to select CloudWatch Logs, you would then need...