From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Logging for Other AWS Services

Logging for Other AWS Services

In this lesson I'm going to quickly cover some of the other options for logging in AWS. So firstly we have VPC flow logs and ELB access logs. Now we did cover VPC flow logs earlier in the course and the ELB access logs are the access logs that you enable for your Elastic Load Balancer. So what do they look like? you're familiar with a VPC flow log. It looks kind of like this and this is what an ELB access log looks like. Now why am I showing these side by side? Reason being exam questions will often come up and they'll test your ability to work out which type of logging you should enable for a specific scenario. So I want you to be aware of the differences between these. So clearly the VPC flow log has quite different information to the access log. We're looking at source and destination IP addresses, ports, the protocol number, the number of packets and bytes and so on. And we can see the accept or reject status. So was this packet dropped or was it accepted and allowed to continue…

Contents