VPC ELB and flow logs

Question 1

To use an ELB in a custom VPC…

Answer 1

…you need two public subnets to make it highly available

Question 2

you cannot enable flow logs for vpcs thatare peered with your VPC unless the peer VPC is in your account

Answer 2

t

Question 3

can flow logs be tagged?

Answer 3

yes

Question 4

after you’ve created a flow log, you can’t change its configuration.

for example, you can’t associate a different IAM role with the flow log.

Answer 4

t

Question 5

THe following IP traffoc is not monitored by flow logss:

traffic generated by instances when they contact the DNS server. if you use your own DNS serve,r then all traffic to that DNS server is logged.

• traffic generated by a windows instance for amazon windows license activation
• traffic to and from 169.254.169.254 for instance metadata
• dhcp traffic

Answer 5

yes