|
Who can write to your AWS database?
Support needs to read customer records in production. On-call needs to change them. The database lives in an RDS Postgres instance inside a private VPC, with an S3 bucket of customer uploads sitting next to it.
Many teams handle this by sharing the database password or writing scripts and automation to manage provisioning unique credentials for each person. The work gets done. You also lose any way to enforce read-only, or to say later who ran what, and either way the credentials end up living on people's laptops. The other option is making every request a ticket, which hands your on-call engineer a queue they never asked for.
Elliot Blackburn and Alyssa Miles demo a setup where your Tailscale identity drives the access you get, and no one has to manage or secure credentials on their laptop.
We'll run the same query as both of them and let you see what happens. We'll also show where this approach stops working, and what you could use instead.
The recipe is public, so you can rebuild it in your own account afterwards.
Speakers
Alyssa Miles
Product Marketing Manager at Tailscale
Elliot Blackburn
Developer Relations Engineer at Tailscale
More webinars
20 minutes
Mitigating the “lethal trifecta”: Unblocking your team without adding risk
Useful AI agents need access to sensitive data, the ability to consume untrusted content, and the ability to take action in external systems. Together, those capabilities unlock incredible productivity, but they also introduce significant security risks. Watch to learn how that challenge shaped the way we engineered Aperture.
Moving Beyond the Honor System: How to Use Fleet Device Health to Control Tailscale Access
Most organizations have the data to know if a laptop is unencrypted or out of date. The problem? That data often lives on a dashboard, while your network access remains wide open. The only way to secure access is to stop trusting devices by default.
Join Allen Valliencourt (Tailscale) and Zach Wasserman (Fleet) to see how Fleet device data can directly control access in Tailscale. We’ll show how to turn device health signals into enforcement so access is earned.
If you’re already using Fleet to monitor your fleet and Tailscale to connect it, you’re ready to enforce device-level access. In this session, we’ll walk through:
- How Fleet device state (via osquery) feeds into Tailscale posture checks
- How device signals—like disk encryption, OS version, and MDM enrollment—map to Tailscale ACLs
- How access is revoked in real time when a device falls out of compliance
Tailscale & AWS: Enterprise Cloud Networking Simplified
In this webinar, we will cover how to connect to your AWS resources easily and securely with Tailscale modernized networking, powered by WireGuard®
With Tailscale + AWS, you can:
- Simplify AWS Connectivity by using Tailscale to reduce the complexity of managing secure remote access to the Amazon resources that power your organization.
- Increase Security for AWS Access by enabling secure remote access from AWS VPC to EC2 instances, IP-based connectivity via subnet routing, exposing services in your EKS clusters and control plane to your tailnet.
- Achieve high-availability failover, seamlessly connect across availability zones, and deliver persistent resource monitoring and session recording to support compliance goals.