# Database Auditing (TiDB Dedicated)
![`smart`](TiDBCloudDatabaseAuditEnable_aa_001_20231025.png)
+ Database auditing includes connections, DML, DDL, DCL and query
+ You must assign and configure a destination bucket in your own Cloud account
+ You must specify at least one auditing filter rules by using regular expression
+ Log delivery is triggered when the log size reaches 10 MB
+ Example for enabling audit logging configuration and setting bucket policy:

```
...
"Effect": "Allow",
"Action": ~!@"s3:PutObject"@!~,
"Resource": "arn:aws:s3:::<your_bucket_name>/*"
...
```
------------------------------------------------------------------------------
TiDB Cloud provides you with a database audit logging to record a history of user access details (such as connecting, DML, DDL, DCL and query) in logs.

The database auditing feature is only available upon request. To request this feature, click `?` in the lower-right corner of the TiDB Cloud console and click `Request Support`. Then, fill in `Apply for database audit logging` in the `Description` field and click `Send`.

Then, you can turn on and configure the database audit logging on the cluster `Audit Setting` menu.

After enabling audit logging, you must specify auditing filter rules to control which user access events to capture and write to audit logs versus which events to ignore. If no filter rules are specified, TiDB Cloud does not log anything.

Please refer to `https://docs.pingcap.com/tidbcloud/tidb-cloud-auditing` to complete the configuration of database auditing and the filter rules.