RDS MySQLの監査ログでrdsadminのログを出力しないように設定してみた

AWSTemplateFormatVersion: "2010-09-09"

Description: RDS Stack

Parameters:
# ------------------------------------------------------------#
# Parameters
# ------------------------------------------------------------# 
  RdsInstanceClass:
    Default: db.t2.micro
    Type: String

  RdsStorageSize:
    Default: 20
    Type: Number

  RdsSubnet1:
    Type: AWS::EC2::Subnet::Id

  RdsSubnet2:
    Type: AWS::EC2::Subnet::Id

  RdsVpcId:
    Type: AWS::EC2::VPC::Id

Resources:
# ------------------------------------------------------------#
# RDS
# ------------------------------------------------------------# 
  RdsSubnetGroup:
    Type: AWS::RDS::DBSubnetGroup
    Properties:
      DBSubnetGroupDescription: rds-subnet-group
      DBSubnetGroupName: rds-subnet-group
      SubnetIds: 
        - !Ref RdsSubnet1
        - !Ref RdsSubnet2
      Tags:
        - Key: Name
          Value: rds-subnet-group

  RdsOptionGroup:
    Type: AWS::RDS::OptionGroup
    Properties:
      EngineName: mysql
      MajorEngineVersion: 8.0
      OptionConfigurations:
        - OptionName: MARIADB_AUDIT_PLUGIN
      OptionGroupDescription: rds-option-group
      OptionGroupName: rds-option-group

  Rdssg:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: for RDS
      GroupName: rds-sg
      SecurityGroupEgress: 
        - CidrIp: 0.0.0.0/0
          FromPort: -1
          IpProtocol: -1
          ToPort: -1
      SecurityGroupIngress:
        - FromPort: 3306
          IpProtocol: tcp
          CidrIp: 0.0.0.0/0
          ToPort: 3306
      Tags: 
        - Key: Name
          Value: rds-sg
      VpcId: !Ref RdsVpcId

  Password:
    Type: AWS::SecretsManager::Secret
    Properties: 
      Description: RDS Password
      GenerateSecretString:
        GenerateStringKey: password
        SecretStringTemplate: '{"username": "root"}'
        ExcludeCharacters: '"@/\'
      Name: rdspassword

  Rds:
    Type: AWS::RDS::DBInstance
    Properties:
      AllocatedStorage: !Ref RdsStorageSize
      BackupRetentionPeriod: 0
      DBInstanceClass: !Ref RdsInstanceClass
      DBInstanceIdentifier: rds
      DBSubnetGroupName: !Ref RdsSubnetGroup
      EnablePerformanceInsights: false
      Engine: mysql
      EngineVersion: 8.0.28
      EnableCloudwatchLogsExports:
        - audit
      MasterUsername: !Sub '{{resolve:secretsmanager:${Password}::username}}'
      MasterUserPassword: !Sub '{{resolve:secretsmanager:${Password}::password}}'
      OptionGroupName: !Ref RdsOptionGroup
      Port: 3306
      StorageType: gp2
      Tags: 
        - Key: Name
          Value: rds
      VPCSecurityGroups: 
        - !Ref Rdssg