Why are you not encrypting your MySQL connections with SSL? If you're in the cloud, you absolutely should be encrypting. Even if you're in your own colos, you should be encrypting (in the chance of inter-colo queries). Seriously, why aren't you encrypting this traffic? Query intelligence isn't an valid excuse. Turn on query logs instead. Percona has shown that the logging impact is very minimal (even if the link is 7 years old now) [0].

[0] https://www.percona.com/blog/2009/02/10/impact-of-logging-on...