mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-04 02:21:02 +08:00
82 lines
3.0 KiB
Plaintext
82 lines
3.0 KiB
Plaintext
---
|
|
title: Protect Applications with Teleport
|
|
description: How to set up Teleport to protect internal apps and cloud provider APIs
|
|
---
|
|
|
|
Teleport Application Access is designed to provide secure access to
|
|
cloud provider APIs and internal applications. Examples include:
|
|
|
|
- The AWS management console.
|
|
- The `aws`, `gcloud`, `gsutil`, and `az` CLIs.
|
|
- Internal control panels.
|
|
- Tools, such as wikis, that are available only when connected to a VPN.
|
|
- Infrastructure dashboards, such as Kubernetes or Grafana.
|
|
- Developer tools, such as Jenkins, GitLab, or Opsgenie.
|
|
|
|
## Demo
|
|
|
|
<video
|
|
autoPlay
|
|
loop
|
|
muted
|
|
playsInline
|
|
controls
|
|
>
|
|
<source
|
|
src="../../img/application-access/app-access.mp4"
|
|
type="video/mp4"
|
|
/>
|
|
|
|
<source
|
|
src="../../img/application-access/app-access.webm"
|
|
type="video/webm"
|
|
/>
|
|
|
|
Your browser does not support the video tag.
|
|
</video>
|
|
|
|
## Getting started
|
|
|
|
Learn how to register an application with Teleport in our [getting started
|
|
guide](./getting-started.mdx).
|
|
|
|
## Protect cloud provider APIs
|
|
|
|
You can use Teleport to provide secure access to your cloud provider's APIs.
|
|
This means that you can prevent unauthorized usage of management consoles and
|
|
CLI tools with the same RBAC system you use to protect your infrastructure.
|
|
|
|
- [AWS Console and CLI Applications](./cloud-apis/aws-console.mdx): How to access
|
|
AWS Management Console, AWS CLI, and AWS SDKs with Teleport.
|
|
- [Google Cloud CLI Applications](./cloud-apis/google-cloud.mdx): How to access
|
|
Google Cloud CLI applications and SDKs with Teleport.
|
|
- [Azure CLI Applications](./cloud-apis/azure.mdx): How to access Azure CLI
|
|
applications and SDKs with Teleport.
|
|
|
|
## Protect internal applications
|
|
|
|
You can use Teleport to enable secure access to internal applications. For
|
|
example, a load balancer might display network telemetry through a control panel
|
|
but might lack the ability to authenticate with and be accessed by resources
|
|
outside your private network.
|
|
|
|
Teleport lets team members access these resources securely, even outside a
|
|
private network, with no shared secrets.
|
|
|
|
These guides explain how to protect internal applications with Teleport:
|
|
|
|
- [Web App Access](./guides/connecting-apps.mdx): How to access web apps with Teleport Application Access.
|
|
- [TCP App Access (Preview)](./guides/tcp.mdx): How to access plain TCP apps with Teleport Application Access.
|
|
- [API Access](./guides/api-access.mdx): How to access REST APIs with Teleport Application Access.
|
|
- [Dynamic Registration](./guides/dynamic-registration.mdx): Register/unregister apps without restarting Teleport.
|
|
- [Interactive Lab](https://play.instruqt.com/teleport/invite/rgvuva4gzkon): Try Teleport using our guided Teleport Application Access lab.
|
|
|
|
## Use Teleport-signed JSON Web Tokens
|
|
|
|
These guides explain how web apps registered with Teleport can use
|
|
Teleport-signed JSON web tokens to implement authentication and authorization.
|
|
|
|
- [Introduction](./jwt/introduction.mdx): Introduction to JWT tokens with Application Access.
|
|
- [Elasticsearch](./jwt/elasticsearch.mdx): How to use JWT authentication with Elasticsearch.
|
|
|