AWS Certified Security - Specialty
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
After detecting suspicious activity on an EC2 instance, you need to capture network traffic for analysis. Which AWS service would you use to capture and store this data?
Explanation:
Amazon VPC Flow Logs is designed to capture information about the IP traffic going to and from network interfaces in your VPC, making it ideal for capturing network traffic for analysis. CloudTrail is for API call logging, CloudWatch Logs for general log collection, and AWS Config for configuration history.