Where can I find logs for denied access through firewall

0

I have inbound rules restricting access to our database based on IP address and have specified our websites IP address (Siteground) to give it access and that works the majority of the time. Occasionally, I'm getting connection timed out on the Siteground logs when trying to connect to the database, but then it works immediately after.

Siteground just moved the server to a new database center and I've updated the IPs but this started after. They're saying there is no way the IP address is changing so I want to verify it in the Amazon logs but can't find them.

2回答
1
承認された回答

Requests made to AWS Firewall Manager can be logged at AWS CloudTrail Logs. https://docs.aws.amazon.com/waf/latest/developerguide/fms-incident-response.html

Make sure you have all the permissions for log delivery.

AWS
回答済み 1年前
profile picture
エキスパート
レビュー済み 1年前
  • Thank you. That's exactly what I was looking for. Not the most intuitive solution from Amazon, but once you know it, it makes sense.

1

When you say firewall, do you mean the RDS security group?
If you are a security group, you can enable VPC flow logging to see the blocked logs.
https://docs.aws.amazon.com/vpc/latest/userguide/working-with-flow-logs.html

profile picture
エキスパート
回答済み 1年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ