VPC Flow Logs

Network traffic visibility and diagnostics.

Capture and analyze VPC network traffic metadata. Troubleshoot connectivity, audit security, and optimize network performance.

Enable logs View docs
Flow Logs10.0.1.5:443 → 10.0.2.8:5432 TCP ACCEPT 1.2KB10.0.1.12:8080 → 10.0.3.1:22 TCP REJECT 0B10.0.2.3:443 → 172.16.0.1:80 TCP ACCEPT 847B10.0.1.8:443 → 10.0.2.15:3306 TCP REJECT 0B10.0.1.1:443 → 10.0.2.20:443 TCP ACCEPT 3.4KB10.0.3.5:80 → 10.0.1.9:443 TCP ACCEPT 2.1KB10.0.2.1:22 → 203.0.113.1:443 TCP REJECT 0B

Full

Visibility

< 1 min

Delivery

Standard

Format

Built-in

Analytics

See every flow.

Full traffic visibility with near real-time delivery.

Full traffic metadata

Capture source, destination, port, protocol, bytes, and action for every flow.

Near real-time

Flow logs delivered within 1 minute for troubleshooting.

Security audit

Audit all accepted and rejected connections for compliance.

Built-in analytics

Query flow logs with SQL. Built-in dashboards.

Custom fields

Add custom metadata fields: VPC, subnet, instance tags.

Export

Stream to S3, Elasticsearch, or analytics platforms.

Getting started

Launch your first instance in three steps. CLI, console, or API — your choice.

Terminal
ur vpc flow-logs enable my-vpc \
  --filter=all \
  --destination=s3://my-logs

Flow log patterns.

Connectivity debugging and network audit.

Connectivity debugging

Identify rejected connections and misconfigured security groups.

View tutorial

Suggested configuration

Real-time · SQL · Dashboards

Estimate your costs

Create detailed configurations to see exactly how much your architecture will cost. Pay for what you use, down to the second.

Configuration 1

Estimated: $20.00/mo

Flow Logs

Traffic & Bandwidth

GB

Add-ons

Advanced Logging & AnalyticsEnhanced analytics (+$0.02/GB)
Cross-region HAActive-active failover
Config 1 cost$20.00

Cost details

$20.00

Capture and analyze VPC network traffic metadata.

Configuration 1
$20.00
Data Processing$5.00
3 Endpoint(s)$15.00
Share

Works seamlessly with

VPC
S3
Elasticsearch
IAM
SIEM
Analytics

Frequently asked questions

See every flow.

Full network traffic visibility with near real-time delivery.

Enable logs View docs