Process Overview
Background
Database audit supports auditing user-installed databases on ECS/BMS as well as RDS databases on Huawei Cloud.
- Database audit cannot be used across regions. The database to be audited and the database audit instance you purchased must be in the same region.
- If SSL is enabled for a database, the database cannot be audited. To use database audit, disable SSL first. For details, see How Do I Disable SSL for a Database?
- For details about audit data storage, see How Long Is the Audit Data of Database Audit Stored by Default?
Auditing Databases Without Agents
Databases of some types and versions can be audited without using agents, as shown in Table 1.
Database Type |
Supported Edition |
---|---|
GaussDB(for MySQL) |
All editions are supported by default. |
RDS for SQLServer |
All editions are supported by default. |
RDS for MySQL |
|
GaussDB(DWS) |
|
PostGresql |
|
- DBSS without agents is easy to configure and use, but the following functions are not supported:
- Successful and failed login sessions cannot be counted.
- The port number of the client for accessing the database cannot be obtained.
- GaussDB(DWS) has the permission control policy for the log audit function. Only Huawei Cloud accounts and users with the Security Administrator permission can enable or disable the DWS database audit function.
Step |
Configuration |
Description |
---|---|---|
1 |
Purchase database audit. Add a database to the database audit instance and enable audit for the database. Apply for database audit. Add a database to the database audit instance and enable audit for the database. |
|
2 |
Enable database audit and connect the added database to the database audit instance. |
|
3 |
By default, database audit complies with a full audit rule, which is used to audit all databases that are connected to the database audit instance. You can view the audit result on the database audit page.
NOTICE:
You can set database audit rules as required. For details, see Adding Audit Scope. |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot