RDS SQL Server now supports publishing SQL Server Audit logs to CloudWatch
Amazon RDS for SQL Server now allows publishing SQL Server Audit logs directly to CloudWatch, enabling real-time analysis of audit data alongside optional S3 storage.
Amazon Relational Database Service (Amazon RDS) for SQL Server now supports publishing SQL Server Audit logs to CloudWatch. SQL Server Audit is a native SQL Server feature that tracks and logs events occurring on the Database Engine. On Amazon RDS, you can create audits and audit specifications just as you would on-premises. You can now publish audit logs to S3, CloudWatch, or both. If both S3 and CloudWatch options are enabled, the audit log publication is marked as 'completed' only after the log files are uploaded to both destinations. Once in CloudWatch, you can perform real-time analysis of the log data. If retention is enabled, RDS keeps your audit logs on your DB instance for the configured period.