VPC FlowLogs

VPC Flow Logs allows you to capture metadata about the traffic flowing in and out of networking interfaces within a VPC.

Flow logs can be placed on a specific network interface, a subnet, or an entire VPC and will capture metadata from the capture point and anything within it. Flow logs aren’t real-time and don’t capture the actual traffic — only metadata on the traffic.