Posted On: Jan 19, 2024

Starting today, Amazon Virtual Private Cloud (VPC) customers can use AWS Transit Gateway Flow Logs in Israel (Tel Aviv), and Canada West (Calgary) regions. The expansion into these regions enables customers to export detailed telemetry information such as source/destination IP addresses, ports, and various metadata for all of their network flows. This feature provides customers with an AWS native tool to centrally export and inspect flow-level telemetry for all network traffic that is traversing between Amazon VPCs and on-premises networks via AWS Transit Gateway.

AWS Transit Gateway enables you to connect thousands of Amazon Virtual Private Clouds (VPCs) and your on-premises networks using a single gateway. With Transit Gateway Flow logs, you are able to gain flow-level insights from one central point in your network(s) using a single AWS account. This capability provides you with flow-level visibility for traffic across AWS regions over Transit gateway peering connections as well as your traffic over Direct Connect and Site-to-site VPN connections. Transit Gateway Flow Logs can help you with proactive network troubleshooting, network capacity planning and compliance and security.

To get started, simply create a new Flow Logs subscription using Transit Gateway or a Transit Gateway Attachment as a resource. This feature is available through the AWS Management Console, the Amazon Command Line Interface (Amazon CLI), and the Amazon Software Development Kit (Amazon SDK).

With this launch, AWS Transit Gateway Flow Logs is available in all AWS regions. For additional information, visit the AWS Transit Gateway Flow Logs public documentation.