AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2025-10-25 · Documentation low

File: AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-configure-evaluate-flows.md

Summary

Restructured network flow classification categories with additional clarifications about VPC boundaries

Security assessment

Changes clarify metric categorization logic but don't address security controls, vulnerabilities, or security features. Focus is on improving documentation accuracy for traffic classification.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-configure-evaluate-flows.md b/AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-configure-evaluate-flows.md
index 6f604b00c..5ed45bbfa 100644
--- a//AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-configure-evaluate-flows.md
+++ b//AmazonCloudWatch/latest/monitoring/CloudWatch-NetworkFlowMonitor-configure-evaluate-flows.md
@@ -18 +18 @@ For workload insights, the top contributors are determined for all the network f
-Network Flow Monitor classifies metrics into designated destination categories. Metrics are only shown in **Workload insights** for traffic flows in these categories. Metrics are displayed for the following categories of flows:
+**Network flow classifications**
@@ -20 +19,0 @@ Network Flow Monitor classifies metrics into designated destination categories.
-  * Between AZs (`INTER_AZ`)
@@ -22 +21 @@ Network Flow Monitor classifies metrics into designated destination categories.
-  * Within AZs (`INTRA_AZ`)
+Network Flow Monitor classifies metrics into designated local-remote categories. Metrics are only shown in **Workload insights** for traffic flows in these categories. Metrics are displayed for the following categories of flows:
@@ -24 +23 @@ Network Flow Monitor classifies metrics into designated destination categories.
-  * Between VPCs (`INTER_VPC`)
+  * Between AZs (`INTER_AZ`). Always within the same VPC.
@@ -26 +25,5 @@ Network Flow Monitor classifies metrics into designated destination categories.
-  * Between Regions (`INTER_REGION`, which means performance for network flows between resources in your Region and the edge of another Region)
+  * Within AZs (`INTRA_AZ`). Always within the same VPC.
+
+  * Between VPCs (`INTER_VPC`). Crosses the boundary between VPCs.
+
+  * Between Regions (`INTER_REGION`. This means performance for network flows between resources in your Region and the edge of another Region