Policy Packs

guardrails-samples

Ensure that all network flow logs are stored securely in S3 buckets, facilitating detailed analysis, anomaly detection, and compliance with security best practices and regulatory requirements.

Enforce Flow Logging to S3 Buckets Is Enabled for AWS VPCs

main

aws_vpc_vpc_flow_logging

Configure VPC Flow logging for the VPC.&#92;n&#92;nVPC Flow Logs is a feature that enables you to capture information about&#92;nthe IP traffic going to and from network interfaces in your VPC. Flow log&#92;ndata can be published to Amazon CloudWatch Logs and Amazon S3.&#92;n

vpcFlowLogging

AWS > VPC > VPC > Flow Logging

aws_vpc_vpc_flow_logging_s3

Configure VPC flow logs to be sent to an S3 bucket,&#92;nper the `Flow Logging &gt; S3 &gt; *` policies&#92;n

vpcFlowLoggingS3

AWS > VPC > VPC > Flow Logging > S3

aws_vpc_vpc_flow_logging_s3_bucket

The name of an S3 Bucket to which the VPC flow logs will be delivered.&#92;nThe S3 Bucket must already exist and the log delivery&#92;nservice (delivery.logs.amazonaws.com) must be granted the appropriate access.&#92;nThe bucket can reside in any account but must be in the same region as the VPC.&#92;n

vpcFlowLoggingS3Bucket

AWS > VPC > VPC > Flow Logging > S3 > Bucket

turbot_policy_setting.aws_vpc_vpc_flow_logging

turbot_policy_setting.aws_vpc_vpc_flow_logging_s3

turbot_policy_setting.aws_vpc_vpc_flow_logging_s3_bucket

Policy	Setting	Note
AWS > VPC > VPC > Flow Logging	Check: Configured per `Flow Logging > *`
AWS > VPC > VPC > Flow Logging > S3	Enabled
AWS > VPC > VPC > Flow Logging > S3 > Bucket	mybucket

Policy Settings