VPC Flow Logs
E426154
VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
All labels observed (1)
| Label | Occurrences |
|---|---|
| VPC Flow Logs canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T4280176 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: VPC Flow Logs Context triple: [Amazon CloudWatch, supports, VPC Flow Logs]
-
A.
NetFlow
NetFlow is a network protocol developed by Cisco for collecting and analyzing IP traffic flow data to support monitoring, accounting, and security.
-
B.
Cloud Logging
Cloud Logging is Google Cloud’s fully managed service for collecting, storing, and analyzing logs from applications and infrastructure running in the cloud and on-premises.
-
C.
AWS Firewall Manager
AWS Firewall Manager is a security management service that centrally configures and manages firewall rules and protections across multiple AWS accounts and resources.
-
D.
Amazon CloudWatch
Amazon CloudWatch is a monitoring and observability service that collects and analyzes logs, metrics, and events from AWS resources and applications to help track performance and operational health.
-
E.
AWS CloudTrail
AWS CloudTrail is a logging and auditing service that records and monitors API calls and account activity across AWS resources for security, compliance, and operational troubleshooting.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: VPC Flow Logs Target entity description: VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
-
A.
NetFlow
NetFlow is a network protocol developed by Cisco for collecting and analyzing IP traffic flow data to support monitoring, accounting, and security.
-
B.
Cloud Logging
Cloud Logging is Google Cloud’s fully managed service for collecting, storing, and analyzing logs from applications and infrastructure running in the cloud and on-premises.
-
C.
AWS Firewall Manager
AWS Firewall Manager is a security management service that centrally configures and manages firewall rules and protections across multiple AWS accounts and resources.
-
D.
Amazon CloudWatch
Amazon CloudWatch is a monitoring and observability service that collects and analyzes logs, metrics, and events from AWS resources and applications to help track performance and operational health.
-
E.
AWS CloudTrail
AWS CloudTrail is a logging and auditing service that records and monitors API calls and account activity across AWS resources for security, compliance, and operational troubleshooting.
- F. None of above. chosen
Statements (59)
| Predicate | Object |
|---|---|
| instanceOf |
AWS networking feature
ⓘ
cloud logging service feature ⓘ |
| availableIn | most AWS commercial regions ⓘ |
| belongsToServiceCategory | AWS networking and content delivery ⓘ |
| canBeFilteredBy |
VPC
ⓘ
network interface ⓘ subnet ⓘ traffic type ⓘ |
| captures |
IP traffic metadata
ⓘ
information about accepted traffic ⓘ information about all traffic (depending on configuration) ⓘ information about rejected traffic ⓘ |
| developedBy | Amazon Web Services ⓘ |
| hasProperty |
can be enabled or disabled per resource
ⓘ
captures flow-level metadata only ⓘ does not capture packet payloads ⓘ generates charges based on log volume and destination service ⓘ |
| integratesWith |
AWS CloudTrail (for auditing configuration changes)
ⓘ
linked to:
AWS CloudTrail
AWS Lambda (for log processing) ⓘ
linked to:
AWS Lambda
AWS Security Hub ⓘ Amazon Athena (for querying logs in S3) ⓘ
linked to:
Amazon Athena
Amazon GuardDuty (as a data source) ⓘ
linked to:
Amazon GuardDuty
Amazon OpenSearch Service (via log streaming) ⓘ
linked to:
Amazon OpenSearch Service
|
| logsTo |
Amazon CloudWatch Logs
ⓘ
linked to:
Amazon CloudWatch
Amazon S3 ⓘ |
| operatesOn |
Elastic Network Interfaces
ⓘ
VPC network interfaces ⓘ VPCs ⓘ subnets ⓘ |
| partOf | Amazon VPC ⓘ |
| records |
VPC ID
ⓘ
action (ACCEPT or REJECT) ⓘ bytes count ⓘ destination IP address ⓘ destination port ⓘ end time of the flow ⓘ instance ID (when applicable) ⓘ interface ID ⓘ log status ⓘ packets count ⓘ protocol ⓘ source IP address ⓘ source port ⓘ start time of the flow ⓘ subnet ID ⓘ traffic direction ⓘ |
| supports |
cross-account log delivery
ⓘ
custom fields selection (depending on version) ⓘ log aggregation in centralized accounts ⓘ multiple log formats ⓘ |
| usedFor |
compliance reporting
ⓘ
network monitoring ⓘ network troubleshooting ⓘ security analysis ⓘ traffic visibility in Amazon VPC ⓘ |
| usedTo |
analyze connectivity issues
ⓘ
detect anomalous traffic patterns ⓘ identify overly permissive security groups ⓘ validate network access controls ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: VPC Flow Logs Description of subject: VPC Flow Logs is an AWS feature that captures detailed information about IP traffic going to and from network interfaces in a Virtual Private Cloud for monitoring, troubleshooting, and security analysis.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.