Exam AWS Certified SysOps Administrator - Associate topic 1 question 436 discussion

VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. In this case the logs cannot capture what happens on-prem.

VPC Flow Logs capture information about the IP traffic going to and from network interfaces in your VPC. If the SysOps administrator is noticing less traffic in the VPC flow logs as compared to on-premises logs, one of the reasons could be throttling in CloudWatch Logs. AWS may throttle data if it exceeds the limits or if there's an exceptionally high rate of flow log records due to a high volume of network traffic. If throttled, some log data may not be delivered to CloudWatch Logs.If they are checking on-prem logs then there is flow logs from on-prem to the VPC.