# Databases

Teleport can provide secure connections to your databases while improving both access control and visibility.

Some of the things you can do with database access:

- Enable users to retrieve short-lived database certificates using a Single Sign-On flow, thus maintaining their organization-wide identity.
- Configure role-based access controls for databases and implement custom [Access Request](https://goteleport.com/docs/ver/17.x/identity-governance/access-requests.md) workflows.
- Capture database activity in the Teleport audit log.

Teleport protects databases through the Teleport Database Service, which is a Teleport Agent service. For more information on agent services, read [Teleport Agent Architecture](https://goteleport.com/docs/ver/17.x/reference/architecture/agents.md). You can also learn how to deploy a [pool of Teleport Agents](https://goteleport.com/docs/ver/17.x/enroll-resources/agents.md) to run multiple agent services.

![Architecture diagram for enrolling databases with Teleport](/docs/assets/images/architecture-5d5a2668a77063b55da0626c61ef283f.svg)

## Getting started

- [Getting Started Guide](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/getting-started.md): Getting started with Teleport database access and AWS Aurora PostgreSQL.

## Guides

- [Enroll AWS Databases (section)](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/enroll-aws-databases.md): Provides instructions on protecting databases in your AWS-managed infrastructure with Teleport.
- [Enroll Azure Databases (section)](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/enroll-azure-databases.md): Provides instructions on protecting databases in your Azure-managed infrastructure with Teleport.
- [Enroll Google Cloud Databases (section)](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/enroll-google-cloud-databases.md): Provides instructions on protecting databases in your Google Cloud-managed infrastructure with Teleport.
- [Enroll Cloud-Hosted Database Platforms (section)](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/enroll-managed-databases.md): Provides instructions on protecting managed databases in your infrastructure with Teleport.
- [Enroll Self-Hosted Databases (section)](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/enroll-self-hosted-databases.md): Provides instructions on protecting self-hosted databases in your infrastructure with Teleport.
- [Database Automatic User Provisioning (section)](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/auto-user-provisioning.md): Configure automatic user provisioning for databases.

## Configuration & management

- [Access Controls](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/rbac.md): Role-based access control (RBAC) for Teleport database access.
- [Using the Teleport Database Service (section)](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/guides.md): Guides to possibilities for running the Teleport Database Service.

## Troubleshooting & support

- [FAQ](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/faq.md): Frequently asked questions about enrolling databases with Teleport.
- [Troubleshooting](https://goteleport.com/docs/ver/17.x/enroll-resources/database-access/troubleshooting.md): Common issues and resolutions for enrolling databases with Teleport.