Description

Detects AWS VPCs that are operating without VPC Flow Logs enabled. VPC Flow Logs are a critical network monitoring feature that captures information about IP traffic going to and from network interfaces in your VPC. Without Flow Logs enabled, organizations lack vital network traffic visibility needed for security monitoring, troubleshooting, and compliance requirements.

Detection Strategy

• Identifies all available (active) VPCs in the specified AWS region

• For each VPC, checks if there are any Flow Logs configured for that VPC ID

• Reports a vulnerability if a VPC has no associated Flow Log configurations