Which AWS feature provides logs of the inbound and outbound IP traffic for network interfaces in a VPC?
Choose an answer
Tap an option to check your answer.
Correct answer: VPC Flow Logs.
Why this is the answer
VPC Flow Logs record detailed information about the IP traffic going to and from network interfaces in your VPC. This includes source and destination IP addresses, ports, protocols, and the action (ACCEPT or REJECT) for each flow. This data is crucial for security analysis, troubleshooting network connectivity, and monitoring network usage. Amazon CloudWatch Logs is a service for monitoring and storing logs from various AWS services and applications, but it doesn't inherently generate network flow logs; it can be a destination for VPC Flow Logs. AWS CloudTrail provides a record of API calls and actions taken by a user, role, or an AWS service, focusing on management events rather than network traffic data. AWS Identity and Access Management (IAM) is used for managing access to AWS services and resources, not for logging network traffic.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed