Answer-first summary for fast verification
Answer: VPC flow logs cannot capture traffic from on-premises servers to a VPC.
VPC Flow Logs only capture traffic within VPC, to/from ENIs in VPC, not the on-premises side over VPN/Direct Connect fully if it's before entering VPC. Traffic from on-prem to VPC is captured at VPC entry but comparison may show less if on-prem logs include more.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
VPC flow logs published to CloudWatch Logs appear to have less traffic than expected when compared to on-premises logs. What is a possible reason?
A
CloudWatch Logs throttling has been applied.
B
The CloudWatch IAM role does not have a trust relationship with the VPC flow logs service.
C
The VPC flow log is still being created.
D
VPC flow logs cannot capture traffic from on-premises servers to a VPC.
No comments yet.