|
1 | 1 | --- |
2 | 2 | title: Teleport Zero Trust Access |
3 | 3 | description: Provides guides for the Teleport Zero Trust Access product. |
| 4 | +template: "landing-page" |
4 | 5 | --- |
5 | 6 |
|
6 | | -<DocCardList /> |
| 7 | +import LandingHero, { LandingHeroProps } from '@site/src/components/Pages/Landing/LandingHero'; |
| 8 | +import Resources, { ResourcesProps } from "@site/src/components/Pages/Homepage/Resources"; |
| 9 | +import UseCasesList, { UseCasesListProps } from "@site/src/components/Pages/Landing/UseCasesList"; |
| 10 | + |
| 11 | +import zeroTrustAccessImg from '@version/docs/img/zero-trust-access/zta-hero.png'; |
| 12 | +import applicationSvg from "@site/src/components/Icon/teleport-svg/application.svg"; |
| 13 | +import linuxServersSvg from "@site/src/components/Icon/teleport-svg/linux-servers.svg"; |
| 14 | +import databaseSvg from "@site/src/components/Icon/teleport-svg/database-access.svg"; |
| 15 | +import kubernetesClustersSvg from "@site/src/components/Icon/teleport-svg/kubernetes-clusters.svg"; |
| 16 | +import windowsDesktopsSvg from "@site/src/components/Icon/teleport-svg/windows-desktops.svg"; |
| 17 | +import autoDiscoverySvg from "@site/src/components/Icon/teleport-svg/auto-discovery.svg"; |
| 18 | +import cloudProvidersSvg from "@site/src/components/Icon/teleport-svg/cloud-providers.svg"; |
| 19 | +import mcpAndAiSvg from "@site/src/components/Icon/teleport-svg/mcp-and-ai.svg"; |
| 20 | + |
| 21 | +<LandingHero |
| 22 | + title="Teleport Zero Trust Access" |
| 23 | + image={zeroTrustAccessImg} |
| 24 | +> |
| 25 | + Easy access to all your infrastructure, on a foundation of cryptographic identity and zero trust. |
| 26 | + |
| 27 | + [Authentication and session joining](./access-controls/guides/joining-sessions.mdx) |
| 28 | + |
| 29 | + [Get started with role-based access control (RBAC)](./access-controls/access-controls.mdx) |
| 30 | + |
| 31 | + [Export audit events to a SIEM tool](./export-audit-events/export-audit-events.mdx) |
| 32 | + |
| 33 | +</LandingHero> |
| 34 | + |
| 35 | +<UseCasesList |
| 36 | + title="Popular topics" |
| 37 | + desktopColumnsCount={2} |
| 38 | + useCases={[ |
| 39 | + { |
| 40 | + title: "Sign in with your identity provider", |
| 41 | + description: "Log into infrastructure via your Single Sign-On (SSO) provider", |
| 42 | + href: "./sso/", |
| 43 | + tags: [ |
| 44 | + { |
| 45 | + name: "Okta", |
| 46 | + href: "./sso/okta/", |
| 47 | + icon: "okta", |
| 48 | + }, |
| 49 | + { |
| 50 | + name: "GitHub", |
| 51 | + href: "./sso/github-sso/", |
| 52 | + icon: "github", |
| 53 | + }, |
| 54 | + { |
| 55 | + name: "Entra ID", |
| 56 | + href: "./sso/entra-id/", |
| 57 | + icon: "entraId", |
| 58 | + }, |
| 59 | + { |
| 60 | + name: "More IdPs", |
| 61 | + href: "./sso/", |
| 62 | + arrow: true, |
| 63 | + }, |
| 64 | + ] |
| 65 | + }, |
| 66 | + { |
| 67 | + title: "VNet: Build without VPNs", |
| 68 | + description: "Connect to internal, non-browser TCP and SSH resources without VPNs. Use familiar tools and workflows while eliminating exposure to public internet.", |
| 69 | + href: "../enroll-resources/application-access/guides/vnet/", |
| 70 | + tags: [ |
| 71 | + { |
| 72 | + name: "Teleport VNet demo", |
| 73 | + href: "https://youtu.be/OQ98VErAorM", |
| 74 | + icon: "youtube", |
| 75 | + }, |
| 76 | + { |
| 77 | + name: "VNet guide", |
| 78 | + href: "../connect-your-client/vnet/", |
| 79 | + }, |
| 80 | + ] |
| 81 | + }, |
| 82 | + { |
| 83 | + title: "Manage and track Teleport audit events", |
| 84 | + description: "Log granular audit events when users and services interact with your cluster. View audit events in Teleport or export them to a third-party tool.", |
| 85 | + href: "./export-audit-events/", |
| 86 | + tags: [ |
| 87 | + { |
| 88 | + name: "Elastic Stack", |
| 89 | + href: "./export-audit-events/elastic-stack/", |
| 90 | + icon: "elasticStack", |
| 91 | + }, |
| 92 | + { |
| 93 | + name: "Panther", |
| 94 | + href: "./export-audit-events/panther/", |
| 95 | + icon: "panther", |
| 96 | + }, |
| 97 | + { |
| 98 | + name: "Datadog", |
| 99 | + href: "./export-audit-events/datadog/", |
| 100 | + icon: "datadog", |
| 101 | + }, |
| 102 | + { |
| 103 | + name: "Splunk", |
| 104 | + href: "./export-audit-events/splunk/", |
| 105 | + }, |
| 106 | + ] |
| 107 | + }, |
| 108 | + { |
| 109 | + title: "Self-host Teleport", |
| 110 | + description: "Run Teleport Enterprise in your own infrastructure, with guides covering high availability and multi-region clusters, securing key material with KMS or HSMs, and more.", |
| 111 | + href: "./deploy-a-cluster/", |
| 112 | + tags: [ |
| 113 | + { |
| 114 | + name: "AWS KMS", |
| 115 | + href: "./deploy-a-cluster/aws-kms/", |
| 116 | + icon: "aws", |
| 117 | + }, |
| 118 | + { |
| 119 | + name: "Google Cloud KMS", |
| 120 | + href: "./deploy-a-cluster/gcp-kms/", |
| 121 | + icon: "googleCloud", |
| 122 | + }, |
| 123 | + { |
| 124 | + name: "Helm chart", |
| 125 | + href: "./deploy-a-cluster/helm-deployments/", |
| 126 | + }, |
| 127 | + ] |
| 128 | + }, |
| 129 | + { |
| 130 | + title: "Infrastructure as Code", |
| 131 | + description: "Manage Teleport's Dynamic Resources using infrastructure as code tools, including Terraform, Helm and the Teleport tctl client tool.", |
| 132 | + href: "./infrastructure-as-code/", |
| 133 | + tags: [ |
| 134 | + { |
| 135 | + name: "Terraform", |
| 136 | + href: "./infrastructure-as-code/terraform-provider/", |
| 137 | + }, |
| 138 | + { |
| 139 | + name: "Kubernetes operator", |
| 140 | + href: "./infrastructure-as-code/teleport-operator/", |
| 141 | + }, |
| 142 | + ] |
| 143 | + }, |
| 144 | + { |
| 145 | + title: "Security best practices", |
| 146 | + description: "Run Teleport Enterprise in your own infrastructure, with guides covering high availability and multi-region clusters, secure CA keys with KMS or HSM, and more.", |
| 147 | + href: "./management/security/", |
| 148 | + tags: [ |
| 149 | + { |
| 150 | + name: "Reducing the blast radius of attacks", |
| 151 | + href: "./management/security/reduce-blast-radius/", |
| 152 | + }, |
| 153 | + { |
| 154 | + name: "Restricting access", |
| 155 | + href: "./management/security/restrict-privileges/", |
| 156 | + }, |
| 157 | + { |
| 158 | + name: "Revoking access", |
| 159 | + href: "./management/security/revoking-access/", |
| 160 | + }, |
| 161 | + ] |
| 162 | + } |
| 163 | + ]} |
| 164 | +/> |
| 165 | + |
| 166 | +<UseCasesList |
| 167 | + title="Use cases" |
| 168 | + useCases={[ |
| 169 | + { |
| 170 | + title: "Enroll and protect your infrastructure", |
| 171 | + description: "Apps, servers, databases, Kubernetes, desktops, and more", |
| 172 | + href: "../enroll-resources/", |
| 173 | + }, |
| 174 | + { |
| 175 | + title: "VNet: Build without VPNs", |
| 176 | + description: "Secure app and SSH access with no VPNs or proxies", |
| 177 | + href: "../enroll-resources/application-access/guides/vnet/", |
| 178 | + }, |
| 179 | + { |
| 180 | + title: "Role-Based Access Control (RBAC)", |
| 181 | + description: "Govern infrastructure access with granular permissions", |
| 182 | + href: "./access-controls/", |
| 183 | + }, |
| 184 | + { |
| 185 | + title: "Passwordless authentication", |
| 186 | + description: "Log in securely using biometrics", |
| 187 | + href: "./access-controls/guides/passwordless/", |
| 188 | + }, |
| 189 | + { |
| 190 | + title: "Integrate with SSO providers", |
| 191 | + description: "Connect Okta, Entra ID, Google, and more", |
| 192 | + href: "./sso/", |
| 193 | + }, |
| 194 | + { |
| 195 | + title: "Structured audit export", |
| 196 | + description: "Forward audit logs to SIEMs like Splunk and Datadog", |
| 197 | + href: "./export-audit-events/", |
| 198 | + }, |
| 199 | + { |
| 200 | + title: "Identity-based audit events", |
| 201 | + description: "Detailed audit logs for every user action", |
| 202 | + href: "../reference/monitoring/audit/", |
| 203 | + }, |
| 204 | + { |
| 205 | + title: "Session recording and playback", |
| 206 | + description: "Record a detailed review of what took place", |
| 207 | + href: "../reference/agent-services/desktop-access-reference/sessions/", |
| 208 | + }, |
| 209 | + { |
| 210 | + title: "Session sharing and moderation", |
| 211 | + description: "Require a moderator for privileged sessions", |
| 212 | + href: "./access-controls/guides/joining-sessions/", |
| 213 | + }, |
| 214 | + { |
| 215 | + title: "Dual authorization capabilities", |
| 216 | + description: "Require approvals to perform critical actions", |
| 217 | + href: "../identity-governance/access-requests/", |
| 218 | + }, |
| 219 | + { |
| 220 | + title: "Manage clusters with IaC", |
| 221 | + description: "Create, update, and manage Teleport in declarative code.", |
| 222 | + href: "./infrastructure-as-code/", |
| 223 | + }, |
| 224 | + ]} |
| 225 | +/> |
| 226 | + |
| 227 | +{/* vale messaging.protocol-products = NO */} |
| 228 | +<Resources |
| 229 | + resources={[ |
| 230 | + { |
| 231 | + title: 'Applications', |
| 232 | + description: 'Protect web apps, TCP apps, and Cloud APIs', |
| 233 | + iconComponent: applicationSvg, |
| 234 | + href: '../enroll-resources/application-access/' |
| 235 | + }, |
| 236 | + { |
| 237 | + title: 'Linux servers', |
| 238 | + description: 'Secure Linux servers and OpenSSH servers', |
| 239 | + iconComponent: linuxServersSvg, |
| 240 | + href: '../enroll-resources/server-access/' |
| 241 | + }, |
| 242 | + { |
| 243 | + title: 'Database access', |
| 244 | + description: 'PostgreSQL, MongoDB, SQL Server, and more', |
| 245 | + iconComponent: databaseSvg, |
| 246 | + href: '../enroll-resources/database-access/' |
| 247 | + }, |
| 248 | + { |
| 249 | + title: 'Kubernetes clusters', |
| 250 | + description: 'Kubernetes clusters and the apps running in them', |
| 251 | + iconComponent: kubernetesClustersSvg, |
| 252 | + href: '../enroll-resources/kubernetes-access/' |
| 253 | + }, |
| 254 | + { |
| 255 | + title: 'Windows desktops', |
| 256 | + description: 'With or without Active Directory', |
| 257 | + iconComponent: windowsDesktopsSvg, |
| 258 | + href: '../enroll-resources/desktop-access/' |
| 259 | + }, |
| 260 | + { |
| 261 | + title: 'Auto-discovery of resources', |
| 262 | + description: 'SSH servers, databases, Kubernetes clusters and apps', |
| 263 | + iconComponent: autoDiscoverySvg, |
| 264 | + href: '../enroll-resources/auto-discovery/' |
| 265 | + }, |
| 266 | + { |
| 267 | + title: 'Cloud providers', |
| 268 | + description: 'AWS, Azure, and Google Cloud consoles and CLI', |
| 269 | + iconComponent: cloudProvidersSvg, |
| 270 | + href: '../enroll-resources/application-access/cloud-apis/' |
| 271 | + }, |
| 272 | + ]} |
| 273 | +/> |
| 274 | +{/* vale messaging.protocol-products = YES */} |
0 commit comments