RDS Proxy connection logging

0

For aws rds proxy, when users connect to the proxy and make requests, can we still dig down to which individual user is making requests via the proxy? i.e. user connects to aws rds proxy, makes a request to the db, can we see which user is making which request from the proxy or does it all show up as “this is coming from the proxy”, not per-user?

AWS
gefragt vor 6 Monaten410 Aufrufe
2 Antworten
0

have you tried the DB Audit log plugins, that might be the best place to dig into the individual users making the connections to the DB and what specific actions are being performed.

Krishna
beantwortet vor 6 Monaten
0

Hi, The RDS proxy logs contain entries with a field called "connection_id" that uniquely identifies the client connection. So by correlating the logs with the timing of requests, you can match specific queries back to the client user who issued them via the proxy. If IAM authentication is configured for the proxy on your env, the IAM user ID will be included in the logs and provide another way to identify the authenticated user behind each query. Also if you are using a database audit plugin or triggers, you may be able to extract client-specific values like IP/principal and record them along with the query.

AWS
Regina
beantwortet vor 4 Monaten
profile picture
EXPERTE
überprüft vor 2 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen