Databases

Teleport can provide secure connections to your databases while improving both access control and visibility.

Some of the things you can do with database access:

• Enable users to retrieve short-lived database certificates using a Single Sign-On flow, thus maintaining their organization-wide identity.
• Configure role-based access controls for databases and implement custom Access Request workflows.
• Capture database activity in the Teleport audit log.

Teleport protects databases through the Teleport Database Service, which is a Teleport agent service. For more information on agent services, read Teleport Agent Architecture. You can also learn how to deploy a pool of Teleport agents to run multiple agent services.

• Database Access Controls: Role-based access control (RBAC) for Teleport database access.
• Database Access FAQ: Frequently asked questions about Teleport database access.
• Database Access Getting Started Guide: Getting started with Teleport database access and AWS Aurora PostgreSQL.
• Database Access Reference: Configuration and CLI reference for the Teleport Database Service.
• Database Automatic User Provisioning: Configure automatic user provisioning for databases.
• Enroll AWS Databases: Provides instructions on protecting databases in your AWS-managed infrastructure with Teleport.
• Enroll Azure Databases: Provides instructions on protecting databases in your Azure-managed infrastructure with Teleport.
• Enroll Cloud-Hosted Database Platforms: Provides instructions on protecting managed databases in your infrastructure with Teleport.
• Enroll Google Cloud Databases: Provides instructions on protecting databases in your Google Cloud-managed infrastructure with Teleport.
• Enroll Self-Hosted Databases: Provides instructions on protecting self-hosted databases in your infrastructure with Teleport.
• Troubleshooting Database Access: Common issues and resolutions for Teleport's Database Access
• Using the Teleport Database Service: Guides to possibilities for running the Teleport Database Service.