A security analyst asks for HTTP request bodies from VPC Flow Logs. What should the network engineer explain?

1. Enabling a one-minute aggregation interval decrypts HTTP and TLS payloads.
2. Flow logs automatically store all bodies in the instance console output.
3. Flow logs contain flow metadata, so application logs or an authorized packet-capture design are needed.
4. Adding the pkt-srcaddr field makes the complete request body available.