Identity-native infrastructure access on AWS with Teleport
summary
Teleport replaces long-lived secrets with short-lived X.509 certs and mutual authentication via a reverse proxy plus an auth service that issues/renews certs, collects an aggregated audit log, and maps Teleport RBAC to AWS IAM. It protects devices with hardware-backed keys (TPM/HSM/Touch ID), records SSH/RDP/Kubernetes/database sessions, and scales from prototypes to production — DoorDash migrated from a brittle homegrown CA to Teleport’s open-source then enterprise stack and resolved scaling and auditing pain.
AI-written summary · about
chapters (8)
- 0:00Introduction and agenda
- 0:25Anatomy of a security breach
- 1:25Principles of secure access
- 4:31Teleport architecture
- 7:18Benefits of the platform
- 8:52Product features and protocols
- 11:13Doordash case study
- 12:51Conclusion and wrap-up
related talks
30mWhy Machines Deserve Rights: Rethinking Automated Infrastructure Access with OSS Te...
31mResilient & Scalable Ecosystems
26mScaling Multi-cluster Kubernetes at Teleport Cloud
01h 03mContinuous Security in the Cloud
45mManaging hybrid workloads with IAM Roles Anywhere, featuring
27mLeveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure
20mTrust by verify - how to provide secure access to your team
36mEdge Security in Untrusted IoT Environments