Enable VPC Flow Logs

If you provided a S3 Bucket during the stack creation from the CloudFormation template in the previous section, a S3 bucket is created by the template that acts as the destination for the VPC Flow Logs. Flow logs must be enabled for each of the VPCs.

Steps

1. Go to the VPCs section on the AWS Console
2. Select the VPC and select the Flow Logs tab for that VPC
3. Select All as the Filter
4. Select Send to an Amazon S3 bucket as the Destination
5. Provide the S3 Bucket ARN copied from the Outputs of the CloudFormation template stack
6. Choose Custom Format as the Log Record Format
7. Select all the fields from the Log Format dropdown
8. Click Create Flow Log