AWS CloudWatchCER-0233
Overly Permissive VPC Flow Log Filters Sent to CloudWatch Logs
VPC Flow Logs configured with the ALL filter and delivered to CloudWatch Logs often result in unnecessarily high log ingestion volumes - especially in high-traffic environments. This setup is rarely required for day-to-day monitoring or...