Infrastructure Access for AWS

Improve Security & Compliance for AWS Infrastructure

Easily control who can provision and access your critical AWS resources
secure access for saas

Teleport is available in the

Unique challenges faced by AWS customers

Managing identity-based access to AWS resources across multiple accounts is time-consuming and complex but necessary to control costs, as well as ensure security and compliance.
Infrastructure sprawl

You need to control who can provision infrastructure to control costs and prevent sprawl.

Granular access

Different teams require different levels of identity-based access for different resources.

Security & Compliance

You need to lock down who can provision & access your AWS infrastructure and keep detailed audit logs.

Why AWS customers big and small trust Teleport

Our unique approach to AWS infrastructure access is not only more secure — it actually improves developer productivity. By providing an identity-aware AWS infrastructure access solution that developers love to use, you can easily implement security and compliance without worrying about backdoors that outmoded solutions encourage.

Get the most out of AWS Management Console

Control who can provision AWS resources

With Teleport, you can separate who can provision AWS resources from who can access them. We provide an identity-aware access solution for the AWS Management Console and CLI that enables fine-grained, role-based access controls to prevent unauthorized creation of AWS resources. If an SRE needs to be able to provision new AWS resources, you can easily grant temporary elevated access that automatically expires.
company logos
miniature diagram
AWS Management Console

Teleport provides connectivity, authentication, authorization and audit for AWS Management Console & CLI.

miniature diagram
AWS CLI

Enforce the same controls for AWS Console at the AWS CLI level.

miniature diagram
Complete audit in AWS CloudTrail

Teleport ensures all AWS Console activity is logged in CloudTrail for complete visibility into access & behavior.

Deep integration for AWS products

Easily enforce granular controls for AWS resources

Teleport enables you to provide fine-grained, identity-based access to your critical AWS resources like Linux & Windows EC2 instances, RDS, Redshift and Aurora databases, EKS clusters, even CI/CD systems like Jenkins and dashboards like Grafana and Kibana running on AWS.
company logos
miniature diagram
AWS EC2

Integrate and extend your corporate identity roles with Teleport access for EC2. New EC2 instances automatically join your Teleport cluster. Supports Linux & Windows.

miniature diagram
AWS RDS, Redshift & Aurora

Get table-level controls for your databases running on AWS and complete visibility to the queries your team are running.

miniature diagram
AWS EKS

Specify separate permissions for Kubernetes pods running on EKS than the underlying EC2 instance.

Built to make the most out of AWS

Teleport uses AWS services for the most integrated experience

The Teleport Cloud runs on AWS, so whether you use our hosted control plane, or self-host on AWS, you get the same integrated experience.
company logos
miniature diagram
Hosted on AWS

The Teleport Cloud is hosted across multiple AWS regions so you can run your AWS workloads close to your Access Plane.

miniature diagram
Buy on AWS Marketplace

Purchase Teleport directly via the AWS Marketplace or use AWS credits to pay for Teleport usage. Private offers available for enterprise customers.

miniature diagram
AWS CloudHSM

For added security protecting the Teleport Certificate Authority (CA) running on AWS, we support AWS CloudHSM.

Works with everything you have

Teleport is open source and it relies on open standards such as X.509 certificates, HTTPS, SAML, OpenID connect and others. Deployed as a single-binary, it seamlessly integrates with the rest of your AWS stack.

aws
Amazon
cloudtrail
AWS CloudTrail
marketplace
AWS Marketplace
aurora
AWS Aurora
cli
AWS CLI
hsm
AWS CloudHSM
ec2
AWS EC2
eks
AWS EKS
management
AWS Management Console
rdc
AWS RDC
windows
Active Directory
k8s
Kubernetes

Easy to get started

Teleport is easy to deploy and use. We believe that simplicity and good user experience are key to first-class security.

Teleport consists of just two binaries.
  1. The tsh client allows users to login to retrieve short-lived certifcates.
  2. The teleport agent can be installed on any server or any Kubernetes cluster with a single command.
Download Teleport
Terminal
# on a client
$ tsh login --proxy=example.com

# on AWS Linux 2
$ yum install teleport

# in a Kubernetes cluster
$ helm install

Try Teleport today

In the cloud, self-hosted, or open source
Get startedView developer docs