From d2cb82455623f69b03af27789f51ad8ab8c8f5d0 Mon Sep 17 00:00:00 2001 From: Ranbel Sun Date: Mon, 3 Feb 2025 17:15:31 -0500 Subject: [PATCH 1/3] PCX-15707 --- src/content/changelogs/access.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/src/content/changelogs/access.yaml b/src/content/changelogs/access.yaml index 13724b10c9b8d4..904daf5ab6ff76 100644 --- a/src/content/changelogs/access.yaml +++ b/src/content/changelogs/access.yaml @@ -9,10 +9,18 @@ entries: title: Access Applications support private hostnames/IPs and reusable Access policies. description: |- Cloudflare Access self-hosted applications can now be defined by [private IPs](/cloudflare-one/applications/non-http/self-hosted-private-app/), [private hostnames](/cloudflare-one/applications/non-http/self-hosted-private-app/) (on port 443) and [public hostnames](/cloudflare-one/applications/configure-apps/self-hosted-public-app/). Additionally, we made Access policies into their own object which can be reused across multiple applications. These updates involved significant updates to the overall Access dashboard experience. The updates will be slowly rolled out to different customer cohorts. If you are an Enterprise customer and would like early access, reach out to your account team. + - publish_date: "2025-01-15" + title: Logpush for SSH command logs + description: |- + Access for Infrastructure now supports exporting SSH command logs using [Logpush](/cloudflare-one/insights/logs/logpush/). - publish_date: "2024-12-04" title: SCIM GA for Okta and Microsoft Entra ID description: |- Cloudflare's SCIM integrations with [Okta](/cloudflare-one/identity/idp-integration/okta/#synchronize-users-and-groups) and [Microsoft Entra ID](//cloudflare-one/identity/idp-integration/entra-id/#synchronize-users-and-groups) (formerly AzureAD) are now out of beta and generally available (GA) for all customers. These integrations can be used for Access and Gateway policies and Zero Trust user management. Note: This GA release does not include [Dashboard SSO SCIM](/fundamentals/setup/account/account-security/scim-setup/) support. + - publish_date: "2024-10-23" + title: SSH with Access for Infrastructure + description: |- + Admins can now use [Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/) to manage privileged access to SSH servers. Access for Infrastructure provides improved control and visibility over who accessed what service and what they did during their SSH session, while also eliminating the risk and overhead associated with managing SSH keys. - publish_date: "2024-08-26" title: Reduce automatic seat deprovisioning minimum to 1 month, down from 2 months. description: |- From 33eab8d7f05f5788b997764bf25a860ceef63208 Mon Sep 17 00:00:00 2001 From: Ranbel Sun Date: Mon, 3 Feb 2025 17:22:54 -0500 Subject: [PATCH 2/3] update SSH introduction --- .../use-cases/ssh/ssh-infrastructure-access.mdx | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx b/src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx index c368f376568906..fc5cd97702ebe7 100644 --- a/src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx +++ b/src/content/docs/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access.mdx @@ -11,7 +11,8 @@ sidebar: import { Tabs, TabItem, Badge, Render } from "~/components"; -[Access for Infrastructure](/cloudflare-one/applications/non-http/infrastructure-apps/) uses the same deployment model as [WARP-to-Tunnel](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-warp-to-tunnel/) but unlocks more granular policy options and command logging functionality. +[Access for Infrastructure](/cloudflare-one/applications/non-http/infrastructure-apps/) provides granular control over how users can connect to your SSH servers. This feature uses the same deployment model as [WARP-to-Tunnel](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-warp-to-tunnel/) but unlocks more policy options and command logging functionality. + ## 1. Connect the server to Cloudflare From 36edc51de5567ed77536617dcdc0aec68dae4348 Mon Sep 17 00:00:00 2001 From: Ranbel Sun Date: Mon, 3 Feb 2025 18:30:27 -0500 Subject: [PATCH 3/3] apply review feedback --- src/content/changelogs/access.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/content/changelogs/access.yaml b/src/content/changelogs/access.yaml index 904daf5ab6ff76..8fb4d5201afb97 100644 --- a/src/content/changelogs/access.yaml +++ b/src/content/changelogs/access.yaml @@ -12,7 +12,7 @@ entries: - publish_date: "2025-01-15" title: Logpush for SSH command logs description: |- - Access for Infrastructure now supports exporting SSH command logs using [Logpush](/cloudflare-one/insights/logs/logpush/). + Enterprise customers can now use Logpush to export SSH command logs for Access for Infrastructure targets. - publish_date: "2024-12-04" title: SCIM GA for Okta and Microsoft Entra ID description: |- @@ -20,7 +20,7 @@ entries: - publish_date: "2024-10-23" title: SSH with Access for Infrastructure description: |- - Admins can now use [Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/) to manage privileged access to SSH servers. Access for Infrastructure provides improved control and visibility over who accessed what service and what they did during their SSH session, while also eliminating the risk and overhead associated with managing SSH keys. + Admins can now use [Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/) to manage privileged access to SSH servers. Access for Infrastructure provides improved control and visibility over who accessed what service and what they did during their SSH session. Access for Infrastructure also eliminates the risk and overhead associated with managing SSH keys by using short-lived SSH certificates to access SSH servers. - publish_date: "2024-08-26" title: Reduce automatic seat deprovisioning minimum to 1 month, down from 2 months. description: |-