diff --git a/src/assets/images/changelog/access/infrastructure-app.png b/src/assets/images/changelog/access/infrastructure-app.png new file mode 100644 index 000000000000000..f267dcd9ed8bb38 Binary files /dev/null and b/src/assets/images/changelog/access/infrastructure-app.png differ diff --git a/src/content/changelog/access/2024-10-01-ssh-with-access-for-infrastructure.mdx b/src/content/changelog/access/2024-10-01-ssh-with-access-for-infrastructure.mdx new file mode 100644 index 000000000000000..16802b25ed8b9b6 --- /dev/null +++ b/src/content/changelog/access/2024-10-01-ssh-with-access-for-infrastructure.mdx @@ -0,0 +1,18 @@ +--- +title: Eliminate long-lived credentials and enhance SSH security with Cloudflare Access for Infrastructure +description: Use short-lived SSH certificates and fine-grained policy to secure access to your SSH servers. +date: 2024-10-01T6:00:00Z +--- + +Organizations can now eliminate long-lived credentials from their SSH setup and enable strong multi-factor authentication for SSH access, similar to other Access applications, all while generating access and command logs. + +SSH with [Access for Infrastructure](/cloudflare-one/applications/non-http/infrastructure-apps/) uses short-lived SSH certificates from Cloudflare, eliminating SSH key management and reducing the security risks associated with lost or stolen keys. It also leverages a common deployment model for Cloudflare One customers: [WARP-to-Tunnel](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-warp-to-tunnel/). + +SSH with Access for Infrastructure enables you to: +- **Author fine-grained policy** to control who may access your SSH servers, including specific ports, protocols, and SSH users. +- **Monitor infrastructure access** with Access and SSH command logs, supporting regulatory compliance and providing visibility in case of security breach. +- **Preserve your end users' workflows.** SSH with Access for Infrastructure supports native SSH clients and does not require any modifications to users’ SSH configs. + +![Example of an infrastructure Access application](~/assets/images/changelog/access/infrastructure-app.png) + +To get started, refer to [SSH with Access for Infrastructure](/cloudflare-one/connections/connect-networks/use-cases/ssh/ssh-infrastructure-access/). diff --git a/src/content/changelog/access/2025-01-15-ssh-logs-and-logpush.mdx b/src/content/changelog/access/2025-01-15-ssh-logs-and-logpush.mdx new file mode 100644 index 000000000000000..2d8e8b4122c3db5 --- /dev/null +++ b/src/content/changelog/access/2025-01-15-ssh-logs-and-logpush.mdx @@ -0,0 +1,13 @@ +--- +title: Export SSH command logs with Access for Infrastructure using Logpush +description: Easily configure automatic export of SSH command logs to third-party storage destinations or to security information and event management (SIEM) tools. +date: 2025-01-15T6:00:00Z +--- + +:::note[Availability] +Only available on Enterprise plans. +::: + +Cloudflare now allows you to send SSH command logs to storage destinations configured in [Logpush](/logs/about/), including third-party destinations. Once exported, analyze and audit the data as best fits your organization! For a list of available data fields, refer to the [SSH logs dataset](/logs/reference/log-fields/account/ssh_logs/). + +To set up a Logpush job, refer to [Logpush integration](/cloudflare-one/insights/logs/logpush/).