VNET flow log captures IP
traffic flowing through VNETs, subnets, and NICs for monitoring, troubleshooting,
network optimization, security, and compliance needs and stores the logs in Azure
Storage
Traffic Analytics leverages
VNET flow logs and aggregates, processes and enriches the
flows to analyze traffic flow and offers insights into network activity, visualization, security, and performance.
Network Watcher packet capture
enables the capture of network packets directly from a virtual machine, helping
users perform deep network analysis and diagnose issues.
Managed identities
provided by Microsoft Entra ID enables VNET flow logs and traffic analytics to
securely access Azure Blob Storage and log analytics workspace respectively without the need to manage credentials. For
more information, see What is
managed identities for Azure resources.
After you enable
managed identity for Network Watcher VNET flow logs, traffic analytics, or packet
capture by granting the managed identity necessary permissions will use the managed identity to obtain an
access token from Microsoft Entra ID for accessing the specified resource.
Learn more.