Flow logs do not capture all IP traffic – NTP service.

I would like to raise the point of missing exception from logging. Its AWS NTP service (time sync). Traffic to and from 169.254.169.123 for the Amazon Time Sync Service is excluded also. 

For more information see: https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html