From 5ee119990fd2f5b7297b331ece6128a6427df359 Mon Sep 17 00:00:00 2001 From: x032205 Date: Mon, 1 Dec 2025 12:11:07 -0500 Subject: [PATCH] Move setup to dedicated page --- docs/docs.json | 1 + .../platform/pam/getting-started/setup.mdx | 35 +++++++++++++++++++ docs/documentation/platform/pam/overview.mdx | 25 ------------- 3 files changed, 36 insertions(+), 25 deletions(-) create mode 100644 docs/documentation/platform/pam/getting-started/setup.mdx diff --git a/docs/docs.json b/docs/docs.json index b9020f399..3f9c210eb 100644 --- a/docs/docs.json +++ b/docs/docs.json @@ -830,6 +830,7 @@ { "group": "Getting Started", "pages": [ + "documentation/platform/pam/getting-started/setup", "documentation/platform/pam/getting-started/resources", "documentation/platform/pam/getting-started/accounts" ] diff --git a/docs/documentation/platform/pam/getting-started/setup.mdx b/docs/documentation/platform/pam/getting-started/setup.mdx new file mode 100644 index 000000000..8da923712 --- /dev/null +++ b/docs/documentation/platform/pam/getting-started/setup.mdx @@ -0,0 +1,35 @@ +--- +title: "Setup" +sidebarTitle: "Setup" +description: "This guide provides a step-by-step walkthrough for configuring Infisical's Privileged Access Management (PAM). Learn how to deploy a gateway, define resources, and grant your team secure, audited access to critical infrastructure." +--- + +Infisical's Privileged Access Management (PAM) solution enables you to provide developers with secure, just-in-time access to your critical infrastructure, such as databases, servers, and web applications. Instead of sharing static credentials, your team can request temporary access through Infisical, which is then brokered through a secure gateway with full auditing and session recording. + +Getting started involves a few key components: +- **Gateways:** A lightweight service you deploy in your own infrastructure to act as a secure entry point to your private resources. +- **Resources:** The specific systems you want to manage access to (e.g., a PostgreSQL database or an SSH server). +- **Accounts:** The privileged credentials (e.g., a database user or an SSH user) that Infisical uses to connect to a resource on behalf of a user. + +The following steps will guide you through the entire setup process, from deploying your first gateway to establishing a secure connection. + + + + Before you can manage any resources, you must deploy an **Infisical Gateway** within your infrastructure. This component is responsible for brokering connections to your private resources. + + [Read the Gateway Deployment Guide](/documentation/platform/gateways/gateway-deployment) + + + Once the Gateway is active, define a **Resource** in Infisical (e.g., "Production Database"). You will link this resource to your deployed Gateway so Infisical knows how to reach it. + + [Learn about Resources](/documentation/platform/pam/getting-started/resources) + + + Add **Accounts** to your Resource (e.g., `postgres` or `read_only_user`). These represent the actual PAM users or privileged identities that are utilized when a user connects. + + [Learn about Accounts](/documentation/platform/pam/getting-started/accounts) + + + Users can now use the Infisical CLI to securely connect to the resource using the defined accounts, with full auditing and session recording enabled. + + diff --git a/docs/documentation/platform/pam/overview.mdx b/docs/documentation/platform/pam/overview.mdx index cf8712e97..2b311c48c 100644 --- a/docs/documentation/platform/pam/overview.mdx +++ b/docs/documentation/platform/pam/overview.mdx @@ -60,31 +60,6 @@ When a user accesses a resource, their connection is routed securely through a R For a deep dive into the technical architecture and security model, see [Architecture](/documentation/platform/pam/architecture). -## Setup Workflow - -Follow this sequence to get up and running with PAM: - - - - Before you can manage any resources, you must deploy an **Infisical Gateway** within your infrastructure. This component is responsible for brokering connections to your private resources. - - [Read the Gateway Deployment Guide](/documentation/platform/gateways/gateway-deployment) - - - Once the Gateway is active, define a **Resource** in Infisical (e.g., "Production Database"). You will link this resource to your deployed Gateway so Infisical knows how to reach it. - - [Learn about Resources](/documentation/platform/pam/getting-started/resources) - - - Add **Accounts** to your Resource (e.g., `postgres` or `read_only_user`). These represent the actual PAM users or privileged identities that are utilized when a user connects. - - [Learn about Accounts](/documentation/platform/pam/getting-started/accounts) - - - Users can now use the Infisical CLI to securely connect to the resource using the defined accounts, with full auditing and session recording enabled. - - - ## Core Capabilities - **[Auditing](/documentation/platform/pam/product-reference/auditing)**: Track and review a comprehensive log of all user actions and system events.