↳ GitHub sourceConnector

Amazon Web Services S3 VPC Flow Logs

Description

This connector allows you to ingest AWS VPC Flow Logs, collected in AWS S3 buckets, to Microsoft Sentinel. AWS VPC Flow Logs provide visibility into network traffic within your AWS Virtual Private Cloud (VPC), enabling security analysis and network monitoring.

Declared status: 1
Declared author / publisher: Microsoft

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

Declared permissions

Read and Write permissions are required.

Workspace

Workspace

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

Template 1: OpenID connect authentication deployment

Template 2: AWS VPC Flow Logs resources deployment

Add new controller

Add new collector

Account details

Role ARN

Queue URL

Data type

JSON Format

Parquet Format

CSV Format

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/AWS VPC Flow Logs/Data Connectors/AWSVPCFlowLogs_CCP/AWSVPCFlowLogs_DataConnectorDefinition.json ↗
Commit: 9800e51 ↗
Source identifier: AWSS3VPCFlowLogsParquetDefinition

Additional source files 2

Solutions/AWS VPC Flow Logs/Data Connectors/AWSVPCFlowLogs_CCP/AWSVPCFlowLogs_DataConnectorDefinition.jsonsource ↗Solutions/AWS VPC Flow Logs/Data/Solution_AWSVPCFlowLogs.jsonsolution-membership ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.