Tom Rosenfeld AstroTom

RDS MySQL Audit Logging Setup Guide

This guide covers enabling audit logging for RDS MySQL instance database-1 with export to CloudWatch and querying examples.

Capture all DML (Data Manipulation) operations performed against the database
Store logs in CloudWatch for 90 days
Query event history in CloudWatch to be able to audit where DML operations are coming from

Specifically, all DML against the item table by an IP address other than 172.31.67.209

Code	Title	Duration	Link
Keynote	Andy Jassy Keynote Announcement Recap	0:01	https://www.youtube.com/watch?v=TZCxKAM2GtQ
Keynote	AWS re:Invent 2016 Keynote: Andy Jassy	2:22	https://www.youtube.com/watch?v=8RrbUyw9uSg
Keynote	AWS re:Invent 2016 Keynote: Werner Vogels	2:16	https://www.youtube.com/watch?v=ZDScBNahsL4
Keynote	[Tuesday Night Live with Jame

	# Install dependencies: python3 -m pip install boto3 rich

	import json
	import boto3
	import argparse
	from decimal import Decimal
	from datetime import datetime, timedelta, timezone
	from rich.console import Console
	from rich.table import Table
	from rich.tree import Tree

	# .zshrc

	# other stuff already in file

	# ------------------------------ my helpers ------------------------------------

	# DoiT Shortcuts Help
	function shortcuts {
	echo "ENV vars:"
	echo " - ORGANIZATION ($ORGANIZATION)"

	# get current ec2 AutoScaling group name
	# note: change region option as yours
	aws autoscaling describe-auto-scaling-instances --region us-east-1 --output text --query=AutoScalingInstances[].AutoScalingGroupName --instance-ids=$(curl -s http://169.254.169.254/latest/meta-data/instance-id)