This template creates a flow log for the specified subnet and captures ACCEPT traffic. The flow log uses a custom log format and is published to a newly created Amazon S3 bucket. The logs are aggregated over 60 second intervals and published in parquet format in Hive-compatible prefixes partitioned on an hourly basis. The flow log is created with two tags.

CloudFormation Template