feat(docs): PAM docs & small UI change

docs/docs.json

@@ -773,6 +773,15 @@
                 ]
               }
             ]
+          },
+          {
+            "item": "Infisical PAM",
+            "groups": [
+              {
+                "group": "Infisical PAM",
+                "pages": ["documentation/platform/pam/overview"]
+              }
+            ]
           }
         ]
       },

docs/documentation/getting-started/introduction.mdx

@@ -38,3 +38,4 @@ Infisical consists of several tightly integrated products, each designed to solv
 - [Infisical PKI](/documentation/platform/pki/overview): Issue and manage X.509 certificates using protocols like EST, with support for internal and external CAs.
 - [Infisical SSH](/documentation/platform/ssh/overview): Provide short-lived SSH access to servers using certificate-based authentication, replacing static keys with policy-driven, time-bound control.
 - [Infisical KMS](/documentation/platform/kms/overview): Encrypt and decrypt data using centrally managed keys with enforced access policies and full audit visibility.
+- [Infisical PAM](/documentation/platform/pam/overview): Manage access to resources like databases, servers, and accounts with policy-based controls and approvals.

docs/documentation/getting-started/overview.mdx

@@ -40,6 +40,12 @@ description: "The open source platform for managing secrets, certificates, and s
   >
   Replace static SSH keys with short-lived SSH certificates to simplify access and improve security.
   </Card>
+  <Card
+    title="Infisical PAM"
+    href="/documentation/platform/pam/overview"
+  >
+    Manage access to resources like databases, servers, and accounts with policy-based controls and approvals.
+  </Card>
 </Columns>
 
 <Columns cols="1">

docs/documentation/platform/pam/overview.mdx

@@ -0,0 +1,53 @@
+---
+title: "Infisical PAM"
+sidebarTitle: "Overview"
+description: "Learn how to manage access to resources like databases, servers, and accounts with policy-based controls and approvals."
+---
+
+Infisical Privileged Access Management (PAM) provides a centralized way to manage and secure access to your critical infrastructure. It allows you to enforce fine-grained, policy-based controls over resources like databases, servers, and more, ensuring that only authorized users can access sensitive systems, and only when they need to.
+
+### How it Works
+
+Infisical PAM employs a resource-based model to organize and manage access. This model is designed to be intuitive and scalable.
+
+#### 1. Create a Resource
+
+The first step is to define a resource you want to manage. A resource represents a target system, such as a PostgreSQL database. When creating a resource, you'll provide the necessary connection details, like the host and port.
+
+![Create Resource](/images/pam/overview/create-resource.png)
+
+#### 2. Add Accounts to the Resource
+
+Once a resource is created, you can add accounts to it. An account represents a specific set of credentials (e.g., a username and password) that can be used to access the resource. This allows you to manage multiple sets of credentials for a single database or server from one place.
+
+![Create Account](/images/pam/overview/create-account.png)
+
+### Infisical PAM Features
+
+#### Session Logging and Auditing
+
+-   **Session Logging**: All user sessions are extensively logged, providing a detailed and searchable record of activities performed during a session.
+-   **Audit Logging**: Every significant event, such as a user starting a session or accessing an account's credentials, is recorded in audit logs. This gives you complete visibility over your project.
+
+![Session Page](/images/pam/overview/session-page.png)
+
+#### Automated Credential Rotation
+
+Infisical PAM can automatically rotate account credentials to enhance your security posture.
+
+Here’s how it works:
+1.  **Add a Rotation Account**: On the resource level, you configure a "rotation account." This is a master or privileged account that has the necessary permissions to change the passwords of other accounts on that same resource.
+![Credential Rotation Account](/images/pam/overview/credential-rotation-account.png)
+
+2.  **Configure Rotation on Accounts**: For each individual account you want to rotate, you can simply enable rotation and set a desired interval (e.g., every 30 days).
+![Rotate Credentials Account](/images/pam/overview/rotate-credentials-account.png)
+
+Infisical will then use the rotation account on the resource to automatically update the credentials of the target account at the specified interval, eliminating credential staleness.
+
+## FAQ
+
+<AccordionGroup>
+  <Accordion title="What resources does Infisical PAM currently support?">
+      Infisical PAM currently supports PostgreSQL, with support for more databases, RDP, Kubernetes, social media accounts, and more coming soon.
+  </Accordion>
+</AccordionGroup>

docs/documentation/platform/project.mdx

@@ -22,6 +22,7 @@ The supported project types are:
 - [Infisical PKI](/documentation/platform/pki/overview): Issue and manage X.509 certificates using protocols like EST, with support for internal and external CAs.
 - [Infisical SSH](/documentation/platform/ssh/overview): Provide short-lived SSH access to servers using certificate-based authentication, replacing static keys with policy-driven, time-bound control.
 - [Infisical KMS](/documentation/platform/kms/overview): Encrypt and decrypt data using centrally managed keys with enforced access policies and full audit visibility.
+- [Infisical PAM](/documentation/platform/pam/overview): Manage access to resources like databases, servers, and accounts with policy-based controls and approvals.
 
 ## Roles and Access Control