SQL Compliance Manager offers an improved architecture that allows registering RDS instances with its new Cloud Agent Service. The SQL Compliance Manager Cloud Agent runs under the SQL Compliance Manager Agent Service account on each registered SQL Server computer that hosts the audited instances and databases inside the AWS Cloud. The Cloud Agent gathers SQL events logs from audited SQL Server on cloud instances and databases, and then sends the raw data to the Collection Server.
Once an RDS instance is registered to audit events, the Collector service receives the audit data request from your registered RDS instance and invokes the RDS Cloud Agent Service to start auditing your RDS instance.
The audited RDS instance is based on the Option Group and S3 bucket Configuration, and after audit completion, the RDS instance transmits the audit file to the AWS S3 bucket. Then, the File processor downloads the new *.sqlaudit file from the AWS S3 bucket parses the file and transfers it to the File Shipper. Finally, the SQL Audited files are transferred to the Collector Service, where the files are processed, and the data is updated in the SQL Compliance repository.
The following access and permissions are required on AWS RDS in the AWS console before registering that RDS instance through the SQL CM Console.
Use the SQLcm Configuration Wizard for the Agent RDS configuration.
Create an Option Group from the AWS console. Login to your AWS account and follow the steps below:
In the main navigation pane, select the Options groups from the sidebar menu.
In the Create option group window, fill out the Option group details by providing a Name, Description, and by selecting the database Engine type and Version. Click Create.
Next, select the created Option Group and select Add option.
In the S3 destination section, fill out the required S3 Bucket information.
Next, choose the Create a New Role option, and provide a name for the IAM role.
In the Additional configuration section, make sure to enable the compression and retention options.
Create an Option Group from the wizard
|
| | | | | | | |