RDS Proxy connection logging

0

For aws rds proxy, when users connect to the proxy and make requests, can we still dig down to which individual user is making requests via the proxy? i.e. user connects to aws rds proxy, makes a request to the db, can we see which user is making which request from the proxy or does it all show up as “this is coming from the proxy”, not per-user?

AWS
asked 5 months ago349 views
2 Answers
0

have you tried the DB Audit log plugins, that might be the best place to dig into the individual users making the connections to the DB and what specific actions are being performed.

Krishna
answered 5 months ago
0

Hi, The RDS proxy logs contain entries with a field called "connection_id" that uniquely identifies the client connection. So by correlating the logs with the timing of requests, you can match specific queries back to the client user who issued them via the proxy. If IAM authentication is configured for the proxy on your env, the IAM user ID will be included in the logs and provide another way to identify the authenticated user behind each query. Also if you are using a database audit plugin or triggers, you may be able to extract client-specific values like IP/principal and record them along with the query.

AWS
Regina
answered 3 months ago
profile picture
EXPERT
reviewed a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions