How to create alarm for rds aurora mysql grant, revoke, manipulations to the "mysql"

Hello, How to create alarm for rds aurora mysql grant, revoke and manipulations to the “mysql” and on connects (queries or anything really) to a database that are not a service user using terraform aws_cloudwatch_log_metric_filter and aws_cloudwatch_metric_alarm ?