5Network Management and Operation
- 5.1Visibility with VPC Flow Logs
See your traffic—understand VPC Flow Logs, capture scope (VPC/subnet/ENI), ACCEPT/REJECT, destinations (CloudWatch/S3), and how they differ from Traffic Mirroring.
- 5.2Monitoring Tools and Reachability
Measure state—understand CloudWatch metrics/alarms, Reachability Analyzer, Network Access Analyzer, and Traffic Mirroring. Choose the tool that matches your question.
- 5.3Troubleshooting and Optimizing Connectivity
Isolate and fix—understand route tables, security groups (stateful), NACLs (stateless), MTU/jumbo frames, and asymmetric routing. Systematically find the cause.

