Networking / VPC / Controls / v2026.11
Enforce VPC Flow Logs on VPCs
CCC.VPC.CN04 · Observability
Ensure VPCs are configured with flow logs enabled to capture traffic information.
Related Capabilities
| ID | Title | Description |
|---|
| CCC.VPC.CP16 | Flow Logs | The service can be configured to capture and publish records of the IP traffic flowing to and from network interfaces in the virtual network. |
Related Threats
| ID | Title | Description |
|---|
| CCC.VPC.TH04 | Network Traffic is Not Recorded When Flow Logs are Disabled | VPC subnets with disabled flow logs lack critical network traffic visibility, which can lead to undetected unauthorized access, data exfiltration, and network misconfigurations. This lack of visibility increases the risk of undetected security incidents. |
Assessment Requirements
| ID | Text | Applicability |
|---|
| CCC.VPC.CN04.AR01 | When network traffic passes to or from an interface in the VPC, the service MUST record it in a flow log. | tlp-amber, tlp-red |