VPC has no associated flow logs

What it checks

VPC has no associated flow logs

Where it applies

Terraform: aws_vpc

CloudFormation: AWS::EC2::VPC

How to fix it

1. Create an aws_flow_log resource with vpc_id = <vpc_id>, traffic_type = "ALL", log_destination pointing at S3 or CloudWatch logs.

Frameworks

• AWS FSBP EC2.6
• SOC 2 CC7.2
• HIPAA 164.312(b)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules