VPC flow logging is not enabled Affecting VPC service in AWS


Severity

0.0
medium
0
10
    Severity Framework
    Snyk CCSS
    Rule category
    Logging / Logging

Is your enviroment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
    Frameworks
    AWS-Well-Architected CIS-AWS CIS-Controls HIPAA ISO-27001 NIST-800-53 SOC-2
  • Snyk ID SNYK-CC-00151
  • credit Snyk Research Team

Description

VPC Flow Logs provide visibility into network traffic that traverses the AWS VPC. Users can use the flow logs to detect anomalous traffic or insight during security workflows.

How to fix?

Reference the aws_vpc in an aws_flog_log vpc_id field.

Example Configuration

resource "aws_vpc" "valid_vpc" {
  # other required fields here
}

resource "aws_flow_log" "test_flow_log" {
  vpc_id         = "${aws_vpc.valid_vpc.id}"
  # other required fields here
}