XSIAM: VPC Flow log custom filters

[sj-williams]

Background

We have been asked to update the flow log export config for XSIAM, see here for details:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Ingest-Network-Flow-Logs-from-Amazon-S3

Slack thread:
https://mojdt.slack.com/archives/C57UPMZLY/p1726212864331239

MP have a similar setup already done in terraform, we can borrow from them:

https://github.com/ministryofjustice/modernisation-platform/blob/e303e8d50a57eced89f0d96ac161999938e15a14/terraform/environments/core-network-services/firewall.tf#L59

Proposed user journey

Approach

Which part of the user docs does this impact

Communicate changes

• post for #cloud-platform-update
• Weeknotes item
• Show the Thing/P&A All Hands/User CoP
• Announcements channel

Questions / Assumptions

Definition of done

• readme has been updated
• user docs have been updated
• another team member has reviewed
• smoke tests are green
• prepare demo for the team

Reference

How to write good user stories