VPC Flow Logs is the correct AWS service that captures information about the IP traffic going to and from network interfaces in your VPC.
Key points about VPC Flow Logs:
- Captures network flow data for VPCs, subnets, and network interfaces
- Records source/destination IP addresses, ports, protocol, and traffic action (accept/reject)
- Helps with troubleshooting connectivity and security issues
- Can be published to Amazon CloudWatch Logs or Amazon S3
Why other options are incorrect:
- Amazon CloudWatch Logs: A log management service, but doesn't specifically capture network traffic flow data
- AWS CloudTrail: Records API calls and management events, not network traffic
- AWS IAM: Manages access control and permissions, not network traffic logging