The AWS account ID of the owner of the source network interface for which traffic is recorded.
The action that is associated with the traffic.
The ID of the Availability Zone that contains the network interface for which traffic is recorded.
The number of bytes transferred during the flow.
The destination address for outgoing traffic, or the IPv4 or IPv6 address of the network interface for incoming traffic on the network interface.
The destination port of the traffic.
AWS Resource Name (ARN) of the ECS cluster if the traffic is from a running ECS task.
Name of the ECS cluster if the traffic is from a running ECS task.
Docker runtime ID of the container if the traffic is from a running ECS task.
ARN of the ECS container instance if the traffic is from a running ECS task on an EC2 instance.
ID of the ECS container instance if the traffic is from a running ECS task on an EC2 instance.
Docker runtime ID of the container if the traffic is from a running ECS task.
Name of the ECS service if the traffic is from a running ECS task and the ECS task is started by an ECS service.
ARN of the ECS task if the traffic is from a running ECS task.
ARN of the ECS task definition if the traffic is from a running ECS task.
ID of the ECS task if the traffic is from a running ECS task.
The time, in Unix seconds, when the last packet of the flow was received within the aggregation interval.
The direction of the flow with respect to the interface where traffic is captured.
The ID of the instance that's associated with network interface for which the traffic is recorded, if the instance is owned by you.
The ID of the network interface for which the traffic is recorded.
The logging status of the flow log.
The number of packets transferred during the flow.
The packet-level (original) destination IP address for the traffic.
The name of the subset of IP address ranges for the pkt-dstaddr field, if the destination IP address is for an AWS service.
The packet-level (original) source IP address of the traffic.
The name of the subset of IP address ranges for the pkt-srcaddr field, if the source IP address is for an AWS service.
The IANA protocol number of the traffic.
The Region that contains the network interface for which traffic is recorded.
The source address for incoming traffic, or the IPv4 or IPv6 address of the network interface for outgoing traffic on the network interface.
The source port of the traffic.
The time, in Unix seconds, when the first packet of the flow was received within the aggregation interval.
The ID of the sublocation that contains the network interface for which traffic is recorded.
The type of sublocation that's returned in the sublocation-id field.
The ID of the subnet that contains the network interface for which the traffic is recorded.
The bitmask value for TCP flags.
The path that egress traffic takes to the destination.
The VPC Flow Logs version.
The ID of the VPC that contains the network interface for which the traffic is recorded.