VPC Flow Logs

Question 1

What 3 Levels can you use flow logs at?

Answer 1

VPC
Subnet
Network Interface

Question 2

Can you enable flow logs for peered VPC’s?

Answer 2

Only if the peered VPC is in your account

Question 3

Can you tag a flow log?

Answer 3

No

Question 4

Can you change the configuration of a flow log after you create it? i.e. change the IAM role

Answer 4

No

Question 5

What traffic is never monitored?

Answer 5

instance traffic to the Amazon DNS Server

Windows instance for AWS license activation

to/from 169.254.169.254 for metadata

DHCP

to reserved IP address for default router