VPC Flow Logs – Connections

Introduction

This report allows you to visualize the inbound and outbound connections within your virtual private clouds (VPCs) to and from public IP addresses.

You can apply filters to identify the type of traffic you want to view, to see if connections have been accepted or rejected, or to only view blacklisted IPs in your results.

Hover your mouse over any point in the chart to see the communication between IP addresses and the ports they are connected to.

Review the AWS topic, VPC Flow Logs, for more information.


Procedure

  1. From the left navigation pane, choose Security > Activity Monitoring > Network (VPC Flow Logs) > Connections.

  2. The VPC FLow Logs – Connections page opens. In its default state, no connections are shown until you configure your options.


  3. From the Traffic drop-down menu, select Inbound or Outbound.
  4. From the Action drop-down menu, select All, None, Accept, or Reject.
  5. Select the Only blacklisted IPs checkbox if you only want to include blacklisted IPs in your results.
  6. In the Start text field, click to display the calendar and use the arrow buttons to select a date.


  7. In the End text field, click to display the calendar and use the arrow buttons to select date.

  8. Note: You can also type a Start and End date in MM/DD/YYYY format.

  9. Click Show Next 20 Connections.

  10. The top 20 connections display on the page.



    Hover your mouse over any point in the chart to see the communication between IP addresses and the ports they are connected to.


See Also:
VPC Flow Logs – Summary
VPC Flow Logs – Events
VPC Flow Logs – Setup