Network monitoring & diagnostics
VPC Flow Logs vs Virtual network flow logs
VPC Flow Logs maps to virtual network flow logs in Azure Network Watcher.
NSG flow logs, the older option, can't be created anymore and retire on September 30, 2027.
Side-by-side comparison
| Aspect | Amazon Web Services | Microsoft Azure |
|---|---|---|
| Service | VPC Flow Logs | Virtual network flow logs |
| Lifecycle | Generally available | Generally available |
| What it is | Captures IP traffic metadata for VPCs, subnets, and network interfaces to CloudWatch Logs, S3, or Firehose. | Network Watcher feature that records IP traffic through virtual networks, subnets, or NICs to a storage account, with optional traffic analytics. It replaces NSG flow logs, which retire September 30, 2027. |
| Pricing model | Billed as vended logs by GB ingested, by destination. | Per GB of flow logs collected, plus storage and optional traffic analytics. |
| Docs | VPC Flow Logs docs | Virtual network flow logs docs |
| Pricing page | VPC Flow Logs pricing | Virtual network flow logs pricing |
| Exams | SOA-C03 SCS-C03 ANS-C01 Retiring | AZ-104 AZ-700 |
Key differences
- Destinations. VPC Flow Logs go to CloudWatch Logs, S3, or Firehose. Azure flow logs go to a storage account, and traffic analytics can process them into Log Analytics.
- Scope. Both can be enabled per network, subnet, or network interface.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Billed as vended logs by GB ingested, by destination. VPC Flow Logs pricing →
- Azure
- Per GB of flow logs collected, plus storage and optional traffic analytics. Virtual network flow logs pricing →
Certification exam mapping
| Exam | Provider | Level | Status |
|---|---|---|---|
| AWS Certified CloudOps Engineer – Associate SOA-C03 | AWS | Associate | current Replaces AWS Certified SysOps Administrator – Associate (SOA-C02), whose last exam day was Sep 29, 2025. Simplified Chinese and Korean versions retire after Nov 19, 2026. |
| AWS Certified Security – Specialty SCS-C03 | AWS | Specialty | current The current code (SCS-C03) is taken from the exam-prep link on the official certification page. Simplified Chinese, Spanish (Latin America), and Portuguese (Brazil) versions retire after Dec 31, 2026. |
| AWS Certified Advanced Networking – Specialty ANS-C01 | AWS | Specialty | retiring The exam is being retired. The last day to take it is Dec 31, 2026. Existing certifications stay active for their three-year period. |
| Microsoft Certified – Azure Administrator Associate AZ-104 | Azure | Associate | current |
| Microsoft Certified – Azure Network Engineer Associate AZ-700 | Azure | Associate | current |
Relevance is based on each exam's published scope, not a line-by-line objective match. Check the official study guide.
Verification notes
- Azure NSG flow logs retire September 30, 2027, and after that date Microsoft deletes the existing NSG flow log resources.
FAQ
What is the Azure equivalent of VPC Flow Logs?
VPC Flow Logs maps to virtual network flow logs in Azure Network Watcher. NSG flow logs, the older option, can't be created anymore and retire on September 30, 2027.
How does pricing compare between VPC Flow Logs and Virtual network flow logs?
AWS: Billed as vended logs by GB ingested, by destination. Azure: Per GB of flow logs collected, plus storage and optional traffic analytics. Check the official pricing pages for current rates.
Which certification exams cover this topic?
AWS Certified CloudOps Engineer – Associate (SOA-C03); AWS Certified Security – Specialty (SCS-C03); AWS Certified Advanced Networking – Specialty (ANS-C01) [retiring]; Microsoft Certified – Azure Administrator Associate (AZ-104); Microsoft Certified – Azure Network Engineer Associate (AZ-700).