mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-03 07:40:28 +08:00
Paul Gottschling
127184f0a8
* Break up /database-access/guides/ Closes #17641 Organize the guides to enrolling databases in specific cloud providers (or self-hosted databases) into separate subsections of the "Database Actions" section, organized by cloud provider (or self-hosted). We can later add general information to the index page of each subsection about how Teleport database access works for each cloud provider. The remaining guides in the "Guides" subsection have to do with database-agnostic functionality of the Teleport Database Service. This change also adds a redirect for each page it moves. * Respond to greedy52 feedback - In the "Database Access" intro page, move the self-hosted section first in the list of links to database-specific guides so it's less easy to miss. - Change "AWS" to "Amazon" in product names. * Fix linter issues * Remove redirects added by the DB guide reorg This prevents us from running into Vercel route limit issues, since the number of redirects is large.
93 lines
3.0 KiB
Plaintext
93 lines
3.0 KiB
Plaintext
---
|
|
title: Database Access
|
|
description: Teleport database access introduction, demo and resources.
|
|
---
|
|
|
|
Teleport can provide secure connections to your databases while improving both
|
|
access control and visibility.
|
|
|
|
Some of the things you can do with database access:
|
|
|
|
- Enable users to retrieve short-lived database certificates using a Single Sign-On
|
|
flow, thus maintaining their organization-wide identity.
|
|
- Configure role-based access controls for databases and implement custom
|
|
[Access Request](../access-controls/access-requests.mdx) workflows.
|
|
- Capture database activity in the Teleport audit log.
|
|
|
|
## Demo
|
|
|
|
Let's connect to a PostgreSQL server with `psql` and pgAdmin 4 after authenticating
|
|
with GitHub, execute a few SQL queries and observe them in the audit log:
|
|
|
|
<video
|
|
autoPlay
|
|
loop
|
|
muted
|
|
playsInline
|
|
controls
|
|
>
|
|
<source
|
|
src="../../img/database-access/dbaccessdemo.mp4"
|
|
type="video/mp4"
|
|
/>
|
|
|
|
<source
|
|
src="../../img/database-access/dbaccessdemo.webm"
|
|
type="video/webm"
|
|
/>
|
|
|
|
Your browser does not support the video tag.
|
|
</video>
|
|
|
|
## Get started
|
|
|
|
- [Getting started](./getting-started.mdx): Connect Aurora PostgreSQL in a 10
|
|
minute guide.
|
|
|
|
## Connect your database
|
|
|
|
Learn how to set up secure access to databases in your infrastructure.
|
|
|
|
- [Self-hosted](./enroll-self-hosted-databases.mdx) databases, regardless of
|
|
cloud provider
|
|
- Managed [Amazon Web Services](./enroll-aws-databases.mdx) databases
|
|
- Managed [Google Cloud](./enroll-google-cloud-databases.mdx) databases
|
|
- Managed [Microsoft Azure](./enroll-azure-databases.mdx) databases
|
|
- [Database-specific cloud platforms](./enroll-managed-databases.mdx) such as
|
|
Snowflake and MongoDB Atlas
|
|
|
|
## Manage the Teleport Database Service
|
|
|
|
The Teleport Database Service proxies connections to databases protected by
|
|
Teleport. Read more about deploying the Teleport Database Service and
|
|
enrolling databases:
|
|
|
|
- [High Availability](./guides/ha.mdx): Learn how to deploy
|
|
multiple instances of the Teleport Database Service to proxy the same set of
|
|
databases.
|
|
- [Dynamic Registration](./guides/dynamic-registration.mdx): Learn how to enroll
|
|
databases without re-deploying the Teleport Database Service.
|
|
|
|
## Learn more
|
|
|
|
To learn more about configuring role-based access control for database access,
|
|
check out the [RBAC](./rbac.mdx) section.
|
|
|
|
Learn how to configure [automatic user
|
|
provisioning](./auto-user-provisioning.mdx), which removes the need for creating
|
|
individual user accounts in advance or using the same set of shared database
|
|
accounts for all users.
|
|
|
|
The [Architecture](./architecture.mdx) section provides a more in-depth look at
|
|
Teleport Database Service internals such as networking and security.
|
|
|
|
See [Reference](./reference.mdx) for an overview of
|
|
database access-related configuration and CLI commands.
|
|
|
|
If you hit any issues, check out the [Troubleshooting
|
|
documentation](./troubleshooting.mdx) for common problems and solutions.
|
|
|
|
## FAQ
|
|
|
|
Finally, check out [Frequently Asked Questions](./faq.mdx).
|