Aurora RDS Audit log

Hello Guillermo Pisqui

I completely see why you want Cloudwatch to save these queries to the log pool based on the information provided.However you have to note that you will exclude all other DML queries logging as (SELECT, INSERT, UPDATE e.i).Only with RDS MySQL are they able to exclude SELECT queries exclusively with setting like :

           SERVER_AUDIT_EVENTS = QUERY_DML_NO_SELECT

This parameter defaults to OFF; set it to ON to enable Advanced Auditing.To exclude the SELECT’s you can use the “server_audit_events” setting and set it to “QUERY_DML”.In the parameter group do settings like:

                   SERVER_AUDIT_EVENTS = QUERY_DML      

Reference:

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Auditing.html#AuroraMySQL.Auditing.Enable.server_audit_events