Which solution will accomplish this with the LEAST amount of effort?
Set up AWS CloudTrail on the VPC. Configure Amazon CloudWatch Logs as the destination.
Set up AWS CloudTrail on the VPC. Configure Amazon S3 as the destination.
Set up flow logs at the elastic network interface level. Configure Amazon S3 as the destination.
Set up flow logs at the VPC level. Configure Amazon S3 as the destination.
Explanations:
AWS CloudTrail logs API activity, not network traffic. This doesn’t capture network traffic data.
AWS CloudTrail logs API activity, not network traffic. Also, CloudTrail logs are not ideal for traffic data capture.
Flow logs at the elastic network interface level capture traffic at a specific interface, not across the entire VPC.
Flow logs at the VPC level capture all network traffic data between instances, and can be stored in Amazon S3 for retention.
I scheme that the answer is:
Set up flow logs at the VPC level. Configure Amazon S3 as the destination.