You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/enable-defender-for-databases-aws.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -102,16 +102,16 @@ The following table shows a list of the required permissions that were given to
102
102
103
103
When you enable Defender for open-source relational databases on your RDS instances, Defender for Cloud automatically enables auditing by using audit logs in order to be able to consume and analyze access patterns to your database.
104
104
105
-
Each relational database management system or service type has its own requirements. The following table describes the requirements for each type.
105
+
Each relational database management system or service type has its own configurations. The following table describes the configurations affected by Defender for Cloud (you are not required to manually set these configurations, this is provided as a reference).
106
106
107
107
| Type | Parameter | Value |
108
108
|--|--|--|
109
109
| PostgreSQL and Aurora PostgreSQL | log_connections | 1|
110
110
| PostgreSQL and Aurora PostgreSQL | log_disconnections | 1 |
111
-
| Aurora MySQL instance and cluster parameter group | server_audit_logging | 1 |
112
-
| Aurora MySQL instance and cluster parameter group | server_audit_events | - If it exists, expand the value to include CONNECT, QUERY, <br> - If it doesn't exist, add it with the value CONNECT, QUERY. |
113
-
| Aurora MySQL instance and cluster parameter group | server_audit_excl_users | If it exists, expand it to include rdsadmin. |
114
-
| Aurora MySQL instance and cluster parameter group | server_audit_incl_users | - If it exists with a value and rdsadmin as part of the include, then it won't be present in SERVER_AUDIT_EXCL_USER, and the value of include is empty. |
111
+
| Aurora MySQL cluster parameter group | server_audit_logging | 1 |
112
+
| Aurora MySQL cluster parameter group | server_audit_events | - If it exists, expand the value to include CONNECT, QUERY, <br> - If it doesn't exist, add it with the value CONNECT, QUERY. |
113
+
| Aurora MySQL cluster parameter group | server_audit_excl_users | If it exists, expand it to include rdsadmin. |
114
+
| Aurora MySQL cluster parameter group | server_audit_incl_users | - If it exists with a value and rdsadmin as part of the include, then it won't be present in SERVER_AUDIT_EXCL_USER, and the value of include is empty. |
115
115
116
116
An option group is required for MySQL and MariaDB with the following options for the MARIADB_AUDIT_PLUGIN (If the option doesn’t exist, add the option. If the option exists expand the values in the option):
117
117
@@ -126,14 +126,14 @@ An option group is required for MySQL and MariaDB with the following options for
126
126
>
127
127
> If you are using the default parameter group, a new parameter group will be created that includes the required parameter changes with the prefix `defenderfordatabases*`.
128
128
>
129
-
> If a new parameter group was created or if static parameters were updated, they won't take effect until the instance is restarted.
129
+
> If a new parameter group was created or if static parameters were updated, they won't take effect until the instance is rebooted.
130
130
131
131
> [!NOTE]
132
132
> - If a parameter group already exists it will be updated accordingly.
133
133
>
134
134
> - MARIADB_AUDIT_PLUGIN is supported in MariaDB 10.2 and higher, MySQL 8.0.25 and higher 8.0 versions and All MySQL 5.7 versions.
135
135
>
136
-
> - Changes to [MARIADB_AUDIT_PLUGIN are added to the next maintenance window](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.MySQL.Options.AuditPlugin.html#Appendix.MySQL.Options.AuditPlugin.Add).
136
+
> - Changes to [MARIADB_AUDIT_PLUGIN for MySQL instances are added to the next maintenance window](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.MySQL.Options.AuditPlugin.html#Appendix.MySQL.Options.AuditPlugin.Add).
0 commit comments