Teleport Launches Identity Governance and Security

Teleport Access Platform for AWS

Improve Security & Compliance for AWS Infrastructure

Easily control who can provision and access your critical AWS resources

Teleport is available in the

Secure your growing AWS Infrastructure

As your AWS infrastructure grows, so does the management and access headache. This in turn could potentially lead to less secured access to your AWS infrastructure. By using Teleport to manage your connectivity, authentication, authorization, and audit you can scale your AWS infrastructure while reducing the potential of inadvertently opening up your AWS resources to being compromised.

Meet security and compliance regulations

Implement security, enforce compliance, and gain visibility into user behavior by consolidating access to EC2 instances, EKS clusters, Aurora, RDS and Redshift databases, and applications, like the AWS Management Console .

Increase developer productivity, save time and money

Teleport enables engineers to access any resource anywhere with a single log in. Teleport is open source and is deployed as a single-binary, allowing for seamless integration with the rest of your AWS stack.

Unique challenges faced by AWS customers

Managing identity-based access to AWS resources across multiple accounts is time-consuming and complex but necessary to control costs, as well as ensure security and compliance.

Infrastructure sprawl

You need to control who can provision infrastructure to control costs and prevent sprawl.

Granular access

Different teams require different levels of identity-based access for different resources.

Security & Compliance

You need to lock down who can provision & access your AWS infrastructure and keep detailed audit logs.

Why AWS customers big and small trust Teleport

Our unique approach to AWS infrastructure access is not only more secure — it actually improves developer productivity. By providing an identity-aware AWS infrastructure access solution that developers love to use, you can easily implement security and compliance without worrying about backdoors that outmoded solutions encourage.

Get the most out of AWS Management Console

Control who can provision AWS resources

With Teleport, you can separate who can provision AWS resources from who can access them. We provide an identity-aware access solution for the AWS Management Console and CLI that enables fine-grained, role-based access controls to prevent unauthorized creation of AWS resources. If an SRE needs to be able to provision new AWS resources, you can easily grant temporary elevated access that automatically expires.

aws screen with approve and deny buttons

AWS Management Console

Teleport provides connectivity, authentication, authorization and audit for AWS Management Console & CLI.

AWS CLI

Enforce the same controls for AWS Management Console at the AWS CLI level.

Diagram of /_next/static/media/aws-cloudtrail-icon.1992aecd.svg

Complete audit in AWS CloudTrail

Teleport ensures all AWS Management Console activity is logged in CloudTrail for complete visibility into access & behavior.

Deep integration for AWS products

Easily enforce granular controls for AWS resources

Teleport enables you to provide fine-grained, identity-based access to your critical AWS resources like Linux & Windows EC2 instances, RDS, Redshift and Aurora databases, EKS clusters, even CI/CD systems like Jenkins and dashboards like Grafana and Kibana running on AWS.

servers, kubernetes cluster, and linux instance

Diagram of /_next/static/media/aws-ec2-icon.e9f8a73f.svg

Amazon EC2

Integrate and extend your corporate identity roles with Teleport access for EC2. New EC2 instances automatically join your Teleport cluster. Supports Linux & Windows.

Diagram of /_next/static/media/aws-aurora-icon.2982f940.svg

Amazon RDS, Redshift, & Aurora

Get table-level controls for your databases running on AWS and complete visibility to the queries your team are running.

Diagram of /_next/static/media/aws-eks-icon.8c1e0771.svg

Amazon EKS

Specify separate permissions for Kubernetes pods running on EKS than the underlying EC2 instance.

Built to make the most out of AWS

Teleport uses AWS services for the most integrated experience

The Teleport Cloud runs on AWS, so whether you use our hosted control plane, or self-host on AWS, you get the same integrated experience.

Hosted on AWS

The Teleport Cloud is hosted across multiple AWS regions so you can run your AWS workloads close to your Access Platform.

Diagram of /_next/static/media/aws-marketplace-icon.08bb5d0c.svg

Buy on AWS Marketplace

Purchase Teleport directly via the AWS Marketplace or use AWS credits to pay for Teleport usage. Private offers available for enterprise customers.

AWS CloudHSM

For added security protecting the Teleport Certificate Authority (CA) running on AWS, we support AWS CloudHSM.

Works with everything you have

Teleport is open source and it relies on open standards such as X.509 certificates, HTTPS, SAML, OpenID connect and others. Deployed as a single-binary, it seamlessly integrates with the rest of your AWS stack.

Amazon

AWS CloudTrail

AWS Marketplace

Amazon Aurora

AWS CLI

AWS CloudHSM

Amazon EC2

Amazon EKS

AWS Management Console

Amazon RDS

Active Directory

Kubernetes

...and many more

Easy to get started

Teleport is easy to deploy and use. We believe that simplicity and good user experience are key to first-class security.

Teleport consists of just two binaries.

The tsh client allows users to login to retrieve short-lived certificates.
The teleport agent can be installed on any server or any Kubernetes cluster with a single command.

Download Teleport

Terminal

# on a client$ tsh login --proxy=example.com
# on a server$ apt install teleport
# in a Kubernetes cluster$ helm install

Try Teleport today

In the cloud, self-hosted, or open source

Get Started View developer docs