Situation 

• It is necessary to check RDS access logs. 

Explanation 

• Access to the instance is an operation at the OS level, not an API call to the AWS service, so it is not recorded by AWS CloudTrail. 

• It is a CloudWatch Log group, and inside it is composed of Log Streams for each node. 

Solution 

• Records of RDS Access Log or Error Log can be checked in the CloudWatch Log groups.