I’m looking to determine if connections to my Aurora MySQL instance are SSL encrypted. Specifically, I want to know if enabling the general_log in the parameter group will provide information about the encryption status of each connection.
Ideally, the log would include entries similar to this fictional example:
2024-08-07T08:15:00.000000Z 42 Connect user@hostname on database_name using SSL/TLS
where it clearly indicates whether a specific connection is using SSL or not.
I am aware of the mysql> status command, which outputs:
mysql> status
--------------
mysql Ver 14.14 Distrib 5.5.30, for Linux (x86_64) using readline 5.1
Connection id: 12
Current database:
Current user: [email protected]
SSL: Cipher in use is DHE-RSA-AES256-SHA
However, this only reflects the current manual connection and does not provide insight into connections made by applications.
Is there a way to determine the SSL status of each connection automatically? Are there any other options or best practices for monitoring the SSL encryption status of connections to Aurora MySQL?
Thanks in advance!