What I want to do is SET global read_only=1 on an AWS Aurora writer instance. Obviously this requires the SUPER grant, and I gather from other answers and Aurora documentation that SUPER cannot be granted. AFAICT there is no mysql.rds_* function that does this, and I can't make out whether there is some parameter group that would allow something like this to be done.
Other than locking individual tables for writes, are there any other options available in this situation?