VPC Flow Logs

Question 1

What are VPC Flow Logs?

Answer 1

Information about the IP traffic going to and from network interfaces in your VPC.

Question 2

Where is VPC Flow Log Data stored?

Answer 2

Flow log data is stored using Amazon CloudWatch Logs

Question 3

At what levels can VPC flow logs be created?

Answer 3

• VPC Level
• Subnet Level
• Network Interface Level (ENIs)

Question 4

Can you enable flow logs for a peered VPC?

Answer 4

Only if the peered VPC is in your account

Question 5

Can you attach tags to VPC flow logs?

Answer 5

Yes

Question 6

After creating a VPC flow log, can you change its configuration?

Answer 6

No

Question 7

What type of IP traffic might not be monitored by VPC Flow logs?

Answer 7

• Traffic generatd by instances when they contact the Amazon DNS server
  
  • _{If you use your own DNS server, traffic to it <em>will</em> be logged}
• Traffic generated by Windows instances for Amazon Windows license activation
• Traffic to and from 169.254.269.254 for instance metadata
• DHCP Traffic
• Traffic to the reserved IP address for the default VPC router

Question 8

What does DHCP stand for?

Answer 8

Dynamic Host Configuration Protocol