Databases

Provide secure connections to database by improving access control and visibility

Report an Issue

Is this page helpful?

How can we improve this page?

Enroll your first database

The Teleport Database Service provides secure database access with short-lived certificates via SSO, RBAC with Access Requests, and audit logs. Improve access control and visibility while centralizing management across infrastructure.

Get started with database access

Access control

Apply RBAC to databases for users to access required data.

Troubleshooting

Common Database access issues with Teleport and their solutions.

Enrolling databases

• AWS databases

  Enroll and protect AWS managed databases.

  • DocumentDB
  • DynamoDB
  • ElastiCache for Redis and Valkey
  • MemoryDB
  • ElastiCache Serverless for Redis and Valkey
  • Keyspaces (Apache Cassandra)
  • OpenSearch
  • RDS Oracle
  • RDS Proxy MySQL
  • RDS Proxy for PostgreSQL
  • RDS Proxy for Microsoft SQL Server
  • RDS and Aurora
  • RDS for SQL Server
  • Redshift Serverless
  • Redshift

• Azure databases

  Enroll and protect Azure managed databases.

  • Azure SQL Server
  • Azure Database for PostgreSQL
  • Azure Redis

• Google Cloud databases

  Protect and enroll databases hosted on Google Cloud.

  • PostgreSQL
  • MySQL
  • Cloud Spanner
  • AlloyDB

• Managed databases

  Protect and enroll databases managed as a dedicated cloud platform.

  • MongoDB Atlas
  • Oracle Exadata
  • Snowflake

• Self-hosted databases

  Protect and enroll self-hosted databases.

  • Cassandra and ScyllaDB
  • Clickhouse
  • CockroachDB
  • Elastic
  • MongoDB
  • MySQL
  • Oracle
  • PostgreSQL
  • Redis Cluster
  • Redis
  • SQL Server with PKINIT authentication
  • Vitess

Database automatic user provisioning

Eliminate the need for shared accounts or manually creating individual ones.

PostgreSQL databases (self-hosted and Amazon RDS)

MySQL databases (self-hosted and Amazon RDS)

MariaDB databases (self-hosted and Amazon RDS)

Amazon Redshift databases

MongoDB databases (self-hosted)

Deployment configuration

Configurations for deploying the Teleport Database Service

• High availability

  Deploy multiple instances of the Teleport Database Service to proxy the same set of databases.

• Dynamic registration

  Add or remove databases without redeploying the Database Service.

• Health checks

  Configure Teleport database health checks and quickly spot issues.

• Auto-discovery

  Automatically discover and enroll databases from cloud providers.

Was this page helpful?

How can we improve this page?