This lab walks you through the steps to Create a Network Monitoring System Using AWS VPC Flow Logs and CloudWatch.
Duration: 2 hours.
AWS Region: US East (N. Virginia) us-east-1.
Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define. You have complete control over your virtual networking environment, including the selection of your own IP address range, creation of subnets, and configuration of route tables and network gateways.
You can use both IPv4 and IPv6 in your VPC for secure and easy access to resources and applications.
You can easily customize the network configuration of your Amazon VPC. For example, you can create a public-facing subnet for your web servers that have access to the internet.
You can also place your backend systems, such as databases or application servers, in a private-facing subnet with no internet access. You can use multiple layers of security, including security groups and network access control lists, to help control access to Amazon EC2 instances in each subnet.
Log in to the AWS Management Console.
Create a VPC and its sub-resources.
Create a VPC Log Flow and integrate it with the CloudWatch.
Create an EC2 Instance.
Verify the logs in Log Group.
Configure CloudWatch Metric Filter and CloudWatch Alarm to monitor traffic.
Test the CloudWatch Alarm.
Validation of the lab.
Deleting AWS Resources.