RDS Proxy connection logging

0

For aws rds proxy, when users connect to the proxy and make requests, can we still dig down to which individual user is making requests via the proxy? i.e. user connects to aws rds proxy, makes a request to the db, can we see which user is making which request from the proxy or does it all show up as “this is coming from the proxy”, not per-user?

AWS
demandé il y a 6 mois411 vues
2 réponses
0

have you tried the DB Audit log plugins, that might be the best place to dig into the individual users making the connections to the DB and what specific actions are being performed.

Krishna
répondu il y a 6 mois
0

Hi, The RDS proxy logs contain entries with a field called "connection_id" that uniquely identifies the client connection. So by correlating the logs with the timing of requests, you can match specific queries back to the client user who issued them via the proxy. If IAM authentication is configured for the proxy on your env, the IAM user ID will be included in the logs and provide another way to identify the authenticated user behind each query. Also if you are using a database audit plugin or triggers, you may be able to extract client-specific values like IP/principal and record them along with the query.

AWS
Regina
répondu il y a 4 mois
profile picture
EXPERT
vérifié il y a 2 mois

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions