Answer: VPC Flow Logs

VPC Flow Logs is the correct AWS service that captures information about the IP traffic going to and from network interfaces in your VPC. **Key points about VPC Flow Logs:** - Captures network flow data for VPCs, subnets, and network interfaces - Records source/destination IP addresses, ports, protocol, and traffic action (accept/reject) - Helps with troubleshooting connectivity and security issues - Can be published to Amazon CloudWatch Logs or Amazon S3 **Why other options are incorrect:** - **Amazon CloudWatch Logs**: A log management service, but doesn't specifically capture network traffic flow data - **AWS CloudTrail**: Records API calls and management events, not network traffic - **AWS IAM**: Manages access control and permissions, not network traffic logging

Author: Ritesh Yadav