What information in the AWS RDS logs can I use to differentiate between specific users that have performed session activities vs Application or system services performing activities?

Looking at the logs, one can see that the users connecting to the databases are: pega@xxxx, pegaadmin@xxxxxx, postgres@xxxx, etc.

It's hard to tell which ordinary users are connecting unless one has to drill down into some of the logs before realizing the info for specific users.

Is there a better way that one can quick know which users are connecting and performing tasks? I need this info for auditing purposes.

Thanks.