A security team at a healthcare company needs to investigate suspicious network activity in a production VPC. They want to capture information about which IP addresses are attempting connections that are being denied by security groups and network ACLs, and store this data for later analysis in Amazon Athena. Which AWS feature should they enable to meet this requirement?