diff --git a/flowlogs/README.md b/flowlogs/README.md
index 780e118..54a28ae 100644
--- a/flowlogs/README.md
+++ b/flowlogs/README.md
@@ -64,6 +64,8 @@ No modules.
 |------|-------------|------|---------|:--------:|
 | <a name="input_account_alias"></a> [account\_alias](#input\_account\_alias) | AWS Account Alias | `string` | `""` | no |
 | <a name="input_account_id"></a> [account\_id](#input\_account\_id) | AWS Account ID (default will pull from current user) | `string` | `""` | no |
+| <a name="input_flowlog_bucket_arn"></a> [flowlog\_bucket\_arn](#input\_flowlog\_bucket\_arn) | S3 Bucket to hold the VPC flowlogs | `string` | n/a | yes |
+| <a name="input_flowlog_role_arn"></a> [flowlog\_role\_arn](#input\_flowlog\_role\_arn) | IAM Role with proper permissions to allow writing VPC flowlogs to cloudwatch logs and streamss | `string` | n/a | yes |
 | <a name="input_override_prefixes"></a> [override\_prefixes](#input\_override\_prefixes) | Override built-in prefixes by component. This should be used primarily for common infrastructure things | `map(string)` | `{}` | no |
 | <a name="input_private_subnets_ids"></a> [private\_subnets\_ids](#input\_private\_subnets\_ids) | List of private subnet objects including: subnet, label, availability\_zone, id | <pre>list(object({<br>    subnet            = string<br>    label             = string<br>    availability_zone = string<br>    id                = string<br>  }))</pre> | `[]` | no |
 | <a name="input_public_subnets_ids"></a> [public\_subnets\_ids](#input\_public\_subnets\_ids) | List of public subnet objects including: subnet, label, availability\_zone, id | <pre>list(object({<br>    subnet            = string<br>    label             = string<br>    availability_zone = string<br>    id                = string<br>  }))</pre> | `[]` | no |
diff --git a/flowlogs/variables.tf b/flowlogs/variables.tf
new file mode 100644
index 0000000..bc52806
--- /dev/null
+++ b/flowlogs/variables.tf
@@ -0,0 +1,9 @@
+variable "flowlog_bucket_arn" {
+  description = "S3 Bucket to hold the VPC flowlogs"
+  type        = string
+}
+
+variable "flowlog_role_arn" {
+  description = "IAM Role with proper permissions to allow writing VPC flowlogs to cloudwatch logs and streamss"
+  type        = string
+}