In this lab, we’ll solve a real-world scenario where we want to automate the creation of VPC Flow Logs whenever we create a new VPC.
We’ll accomplish this with a CloudWatch rule and a Lambda function.
[GitHub Repository](https://github.com/linuxacademy/la-aws-security_specialty/tree/master/Enabling-VPC-Flow-Logs-with-Automation)
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Create CloudWatch rule for `CreateVpc` API call.
- Navigate to CloudWatch.
- Click Create rule.
- Select Event Pattern.
- Service Name: EC2
- Event Type: AWS API Call via CloudTrail
- Specific Operation: "CreateVpc"
- Note that
eventNamesetsCreateVpcin the preview - Click Add target.
- Select Lambda function
EnableVpcFlowLogs. - Click Configure details.
- Navigate to CloudWatch.
- Create a VPC.
Open the VPC service. Click Create VPC.
- Click Select
- Name: myvpc
- Click Create VPC (use a IP v4 CIDR like 10.0.0.0/16)
- Click OK
