Skip to content

Commit c905e5a

Browse files
Merge pull request #274082 from CESANU/patch-22
Update enable-defender-for-databases-aws.md
2 parents 746aa3b + 8067ac9 commit c905e5a

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

articles/defender-for-cloud/enable-defender-for-databases-aws.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -102,16 +102,16 @@ The following table shows a list of the required permissions that were given to
102102

103103
When you enable Defender for open-source relational databases on your RDS instances, Defender for Cloud automatically enables auditing by using audit logs in order to be able to consume and analyze access patterns to your database.
104104

105-
Each relational database management system or service type has its own requirements. The following table describes the requirements for each type.
105+
Each relational database management system or service type has its own configurations. The following table describes the configurations affected by Defender for Cloud (you are not required to manually set these configurations, this is provided as a reference).
106106

107107
| Type | Parameter | Value |
108108
|--|--|--|
109109
| PostgreSQL and Aurora PostgreSQL | log_connections | 1|
110110
| PostgreSQL and Aurora PostgreSQL | log_disconnections | 1 |
111-
| Aurora MySQL instance and cluster parameter group | server_audit_logging | 1 |
112-
| Aurora MySQL instance and cluster parameter group | server_audit_events | - If it exists, expand the value to include CONNECT, QUERY, <br> - If it doesn't exist, add it with the value CONNECT, QUERY. |
113-
| Aurora MySQL instance and cluster parameter group | server_audit_excl_users | If it exists, expand it to include rdsadmin. |
114-
| Aurora MySQL instance and cluster parameter group | server_audit_incl_users | - If it exists with a value and rdsadmin as part of the include, then it won't be present in SERVER_AUDIT_EXCL_USER, and the value of include is empty. |
111+
| Aurora MySQL cluster parameter group | server_audit_logging | 1 |
112+
| Aurora MySQL cluster parameter group | server_audit_events | - If it exists, expand the value to include CONNECT, QUERY, <br> - If it doesn't exist, add it with the value CONNECT, QUERY. |
113+
| Aurora MySQL cluster parameter group | server_audit_excl_users | If it exists, expand it to include rdsadmin. |
114+
| Aurora MySQL cluster parameter group | server_audit_incl_users | - If it exists with a value and rdsadmin as part of the include, then it won't be present in SERVER_AUDIT_EXCL_USER, and the value of include is empty. |
115115

116116
An option group is required for MySQL and MariaDB with the following options for the MARIADB_AUDIT_PLUGIN (If the option doesn’t exist, add the option. If the option exists expand the values in the option):
117117

@@ -126,14 +126,14 @@ An option group is required for MySQL and MariaDB with the following options for
126126
>
127127
> If you are using the default parameter group, a new parameter group will be created that includes the required parameter changes with the prefix `defenderfordatabases*`.
128128
>
129-
> If a new parameter group was created or if static parameters were updated, they won't take effect until the instance is restarted.
129+
> If a new parameter group was created or if static parameters were updated, they won't take effect until the instance is rebooted.
130130
131131
> [!NOTE]
132132
> - If a parameter group already exists it will be updated accordingly.
133133
>
134134
> - MARIADB_AUDIT_PLUGIN is supported in MariaDB 10.2 and higher, MySQL 8.0.25 and higher 8.0 versions and All MySQL 5.7 versions.
135135
>
136-
> - Changes to [MARIADB_AUDIT_PLUGIN are added to the next maintenance window](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.MySQL.Options.AuditPlugin.html#Appendix.MySQL.Options.AuditPlugin.Add).
136+
> - Changes to [MARIADB_AUDIT_PLUGIN for MySQL instances are added to the next maintenance window](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.MySQL.Options.AuditPlugin.html#Appendix.MySQL.Options.AuditPlugin.Add).
137137
138138
## Related content
139139

0 commit comments

Comments
 (0)