I am currently looking for an existing implementation method to generate logging of accesses and of usage of a series of MySQL databases by developers (not services) for further auditing. My current estimate is that all traffic would have to go through a proxy that logs everything and transparently forwards it to the target database server. I have tried looking through the logging mechanisms inside MySQL and it doesn't seem to generate the information I need.
Is my assessment correct?
I don't know if this question belongs here (or if I should post a second question) but I have been reading into something called HashiCorp Vault as I've been told that it covers my use case. I don't see how a centralized secret storage system will help me with the generation of logs for auditing.
Does anyone know if this supposed Vault will actually log access or even act as a proxy?