Your company has setup EC2 Instances in a VPC for their application. The IT Security department has advised that all traffic be monitored to the EC2 Instances. Which of the following features can be used to capture information for outgoing and incoming IP traffic from network interfaces in a VPC.

Answer options:

A.AWS Cloudwatch
B.AWS EC2
C.AWS SQS
D.AWS VPC Flow Logs

Answer – D
The AWS Documentation mentions the following
VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow log data can be published to Amazon CloudWatch Logs and Amazon S3. After you`ve created a flow log, you can retrieve and view its data in the chosen destination.
Option A is incorrect since this is a monitoring service
Option B is incorrect since this is a compute service
Option C is incorrect since this is a messaging service
For more information on VPC flow logs, please visit the below URL
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html