How can I find IP addresses that attempt to connect to Amazon RDS (Aurora MySQL)?

0

I want to find out which IP addresses are attempting to connect to my Aurora MySQL database so that I can create an inbound rule to allow them. I have enabled CloudTrail, but it only lists my own IP address and does not list any other IP addresses that attempt to connect, regardless of if they're successful or not.

Where can I find such a list of attempted connections?

2개 답변
0

One way is to use "Performance Insights" on the RDS console. It appears on left pane if the feature is turned on. On the insights page, choose your db from dropdown and scroll down to "Database Load". Select "Host" for "Slice By" selection. You will see a chart of all IPs connections to DB within the monitoring time window.
For a programatic solution, you will have to explore Mysql performance tables and run queries over them.

답변함 2년 전
0

I recommend you to use VPC Flow Logs.

VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow log data can be published to Amazon CloudWatch Logs or Amazon S3. After you create a flow log, you can retrieve and view its data in the chosen destination.

In your case, with VPC Flow Logs, you will be able to identify the source IP addresses that are connecting to your Amazon Aurora cluster and then create an allow list.

Here's the documentation: https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html

profile pictureAWS
답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠