By using AWS re:Post, you agree to the Terms of Use
/Aurora RDS Audit log/

Aurora RDS Audit log

0

How can I exclude "select" queries from auditing in an Aurora Mysql cluster? I want Cloudwatch to not save these queries to the log pool.

1 Answers
0

Hello Guillermo Pisqui

I completely see why you want Cloudwatch to save these queries to the log pool based on the information provided.However you have to note that you will exclude all other DML queries logging as (SELECT, INSERT, UPDATE e.i).Only with RDS MySQL are they able to exclude SELECT queries exclusively with setting like :

           SERVER_AUDIT_EVENTS = QUERY_DML_NO_SELECT

This parameter defaults to OFF; set it to ON to enable Advanced Auditing.To exclude the SELECT’s you can use the “server_audit_events” setting and set it to “QUERY_DML”.In the parameter group do settings like:

                   SERVER_AUDIT_EVENTS = QUERY_DML      

Reference:

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Auditing.html#AuroraMySQL.Auditing.Enable.server_audit_events

answered 14 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions