https://kirelos.com/configure-aws-vpc-flow-logs-to-cloudwatch-log-group/