Where can I find logs for denied access through firewall

Question

I have inbound rules restricting access to our database based on IP address and have specified our websites IP address (Siteground) to give it access and that works the majority of the time.    Occasionally, I'm getting connection timed out on the Siteground logs when trying to connect to the database, but then it works immediately after.

Siteground just moved the server to a new database center and I've updated the IPs but this started after.  They're saying there is no way the IP address is changing so I want to verify it in the Amazon logs but can't find them.

Accepted Answer

Requests made to AWS Firewall Manager can be logged at AWS CloudTrail Logs.
https://docs.aws.amazon.com/waf/latest/developerguide/fms-incident-response.html

Make sure you have all the permissions for log delivery.

Answer

When you say firewall, do you mean the RDS security group?  
If you are a security group, you can enable VPC flow logging to see the blocked logs.  
https://docs.aws.amazon.com/vpc/latest/userguide/working-with-flow-logs.html

Where can I find logs for denied access through firewall

相關內容