Configuring VPC Flow Logs

VPC flow logs capture IP traffic through network interfaces. A single flow log can cover one or more network interfaces (NIs) of a single type (such as an individual instance's NI, a subnet's NI, or a VPC's NI). Traffic capturing can be configured to only capture accepted or rejected traffic. Between this, and the option to specify custom formats for the information fields that appear in the flow log records, you can fine-tune logging to gain an overview of network traffic in your VPC.