Abstract: Techniques for identifying unencrypted network flows using virtual private cloud encryption controls are described. An encryption control system in a cloud provider network receives a request to monitor an encryption state of network traffic associated with a virtual private cloud (VPC). Based on collected network flow data indicative of an encryption state associated with each network flow, the system identifies a network flow associated with the VPC as not being encrypted. This identified network flow, which may be present in the VPC or in underlying architecture of the cloud provider network, can be presented via a user interface.

Abstract: A service provider receives a request to attach a subscription to a client node. The request can be an authenticated request by an entity associated with the client node. In response to the request, information is stored that indicates the client node is authorized for the subscription. A service can determine a connection by the client node to a service. The connection can trigger the subscription to be created for the client node.