Transit Gateway flow log question

Question

I created a transist gateway flow log with the following IAM role
myaccount:role/aws-service-role/transitgateway.amazonaws.com/AWSServiceRoleForVPCTransitGateway which is predefined, as I do not have permission to create a new role.
My flowlog stream is empty. 
The policy might be not configured for flow log ?

thanks !!

Didier Durand · Accepted Answer

Hi,

Please, have a look out at https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-troubleshooting.html#flow-logs-troubleshooting-incomplete-records

You'll find in this guidance, the possible causes of empty log stream

Also maybe related to your case:
1. https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-troubleshooting.html#flow-logs-troubleshooting-no-log-group
2. https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs-troubleshooting.html#flow-logs-troubleshooting-not-found

Best,

Didier

gongya · Answer

thanks so much for the info provided.

gongya · Answer

Just checked to notice no flow log policy

Transit Gateway flow log question

Add your answer

Relevant content