# Infrastructure access

Last validated May 18, 2026

Tailscale provides secure, least-privilege access to your production infrastructure without exposing services to the public internet. Replace SSH bastion hosts with direct, encrypted connections, record sessions for compliance, and manage fine-grained access controls across multi-cloud environments.

## Popular workflows

[**Record SSH sessions for compliance and audit**](/docs/use-cases/infrastructure-access/record-ssh-sessions-compliance) — Record SSH sessions for compliance and auditing purposes.

[**Manage least-privilege access and just-in-time access to production environments**](/docs/use-cases/infrastructure-access/manage-least-priviledged-and-jit-access) — Enforce least-privilege and just-in-time access policies for production infrastructure using Tailscale tags, grants, and ephemeral nodes.

[**Manage access across multi-cloud or multi-region cloud environments**](/docs/use-cases/infrastructure-access/access-multi-cloud-or-multi-region-cloud-envs) — Connect cloud VPCs, Kubernetes clusters, and remote teams across AWS, GCP, Azure, and on-premises networks using Tailscale.