AWS Cloud WAN now supports Flow Logs

AWS Cloud WAN has introduced VPC Flow Logs, enabling network administrators to monitor IP traffic across their global network from a single account. Previously, teams had to compile logs from multiple VPCs, accounts, and regions, often requiring coordination with other departments. The new feature consolidates traffic data between VPCs, regions, and on-premises networks connected via AWS Direct Connect, Site-to-Site VPN, or SD-WAN, streamlining network oversight.

Flow Logs capture detailed metrics such as IP addresses, ports, protocol, traffic volume, and packet-loss counters, along with Cloud WAN-specific metadata like segment, region, and attachment details. Administrators can enable logs for entire core networks, individual edges, or specific attachments, publishing data to Amazon CloudWatch Logs, Amazon S3, or Amazon Data Firehose for analysis and compliance.

The feature supports troubleshooting connectivity and performance issues, capacity planning based on historical bandwidth trends, and identifying unusual traffic patterns for security monitoring. By centralizing this data, Cloud WAN reduces the administrative burden of tracking network activity across distributed environments.

AWS Cloud WAN Flow Logs are available at no additional charge, with standard destination charges applying for CloudWatch Logs, S3, or Data Firehose. The feature is accessible in all AWS Regions where Cloud WAN is supported, deployable via the AWS Management Console, CLI, or API.