💼 3.9 Ensure VPC flow logging is enabled in all VPCs

• Contextual name: 💼 3.9 Ensure VPC flow logging is enabled in all VPCs
• ID: /frameworks/cis-aws-v1.4.0/03/09
• Located in: 💼 3 Logging

Description

VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. After you've created a flow log, you can view and retrieve its data in Amazon CloudWatch Logs. It is recommended that VPC Flow Logs be enabled for packet "Rejects" for VPCs.

Similar

• Sections
  • /frameworks/cis-aws-v1.5.0/03/09
  • /frameworks/cis-aws-v1.3.0/03/09
• Internal
  • ID: dec-c-6c2f106d

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 CIS AWS v1.3.0 → 💼 3.9 Ensure VPC flow logging is enabled in all VPCs		1	1
💼 CIS AWS v1.5.0 → 💼 3.9 Ensure VPC flow logging is enabled in all VPCs - Level 2 (Automated)		1	1

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 CIS AWS v1.3.0 → 💼 3.9 Ensure VPC flow logging is enabled in all VPCs		1	1
💼 CIS AWS v1.5.0 → 💼 3.9 Ensure VPC flow logging is enabled in all VPCs - Level 2 (Automated)		1	1

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags

Policies (1)

Policy	Logic Count	Flags
📝 AWS VPC Flow Logs are not enabled 🟢	1	🟠 x1, 🟢 x5

Internal Rules

Rule	Policies	Flags
✉️ dec-x-9c041667	1