Skip to content
DOCS
User Guide
CLI Guide
API Guide
AI Guide
Search
Ctrl
K
Cancel
Releases
Support
Status
Knowledge Base
Get Support
GitHub
Select theme
Dark
Light
Auto
0
What is Aembit?
Signup options
How Aembit works
Core concepts
Conceptual overview
Client Workloads
Server Workloads
Trust Providers
Access Conditions
Credential Providers
Access Policies
Aembit Cloud
Aembit Edge
Audit & report
Administration
Scaling with Terraform
Quickstart
Overview
1 - Core setup
2 - Add Access Policy
Tutorials
Overview
Deploying on Kubernetes
Scaling with Terraform
Deploying on VMs
Use cases
Overview
Multicloud
Microservices
Credentials
Third-party access
CI/CD
Security posture
Overview
Software architecture
Threat model
Compliance
Glossary
Changelog
LLM resources
Get support
1
Overview
Deploy & Install
Overview
Components & packages
Agent Controller
Agent Proxy
Colocating Edge Components
Container image best practices
Verifying container images
Verifying binary releases
CI/CD
Overview
GitHub Actions
Overview
Get started tutorial
Retrieve credentials
Action reference
Edge CLI
GitLab Jobs
Overview
GitLab CI/CD Component
Aembit CLI
Jenkins Pipelines
Kubernetes
Overview
Deploy to Kubernetes
Managing Agent Injector certificates
AWS EKS Fargate
OpenShift
Verify Aembit Helm chart
Serverless
Overview
AWS ECS Fargate
AWS Lambda Container
AWS Lambda Functions
Virtual appliances
beta
Overview
Virtual Appliance
VMware vSphere
beta
Overview
About Network Identity Attestation
Process Hash Attestation
Set up Network Identity Attestor
Network Identity Attestation reference
Virtual machines
Overview
Linux
Agent Controller
Agent Proxy
SELinux
Windows
Agent Controller
Agent Proxy
Advanced options
Overview
Agent Controller
High Availability
Aembit PKI-based TLS
Custom PKI-based TLS
Create Agent Controller
Agent Proxy
HTTP shutdown
Termination strategy
Install AWS RDS certificates
Explicit steering
Selective Transparent Steering
About traffic steering methods
TLS Decrypt
Overview
Configure TLS Decrypt
About Standalone CA
Configure a Standalone CA
Change Agent log levels
Prometheus-compatible metrics
Trust private CAs
Discovery
beta
Overview
Manage discovered workloads
Sources
Overview
Aembit Edge
Wiz
Manage Access Policies
Overview
Create an Access Policy
Client Workloads
Overview
Client Workload IDs
Overview
Using multiple identifiers
Aembit Client ID
AWS Account ID
AWS EC2 Instance ID
AWS ECS Service Name
AWS ECS Task Family
AWS Lambda ARN
AWS Region
Azure Subscription ID
Azure VM ID
GCP Identity Token
GitHub ID Token Repository
GitHub ID Token Subject
GitLab ID Token Namespace Path
GitLab ID Token Project Path
GitLab ID Token Ref Path
GitLab ID Token Subject
Hostname
Kubernetes Namespace
Kubernetes Pod Name
Kubernetes Pod Name Prefix
Kubernetes Service Account Name
Kubernetes Service Account UID
Process Name
Process Path
Process User Name
Source IP Address
Terraform Cloud Organization ID
Terraform Cloud Project ID
Terraform Cloud Workspace ID
Trust Providers
Overview
Add a Trust provider
Find Edge SDK Client ID
AWS Metadata Service trust provider
AWS Role Trust Provider
Azure Metadata Service trust provider
GCP Identity Token Trust Provider
GitHub Trust Provider
Gitlab Trust Provider
Kerberos
Kubernetes Service Account trust provider
OIDC ID Token
Terraform Cloud Identity Token Trust Provider
Access Conditions
Overview
Geo IP
Time Condition
Integrations
Overview
CrowdStrike Integration
Wiz Integration
CrowdStrike
Wiz
Credential Providers
Overview
Private Network Access
Integrations
Overview
AWS IAM Role
Azure Entra Federation
GitLab.com
GitLab Dedicated/Self-Managed
Multiple Credential Providers
Aembit Access Token
API key
About OIDC ID Tokens
OIDC ID Token
About SigV4/4a
AWS Secrets Manager
AWS STS Federation
Multiple AWS STS Providers
About JWT-SVID Token
JWT-SVID Token
Azure Entra WIF
Azure Key Vault
GitLab account
Google GCP WIF
HashiCorp Vault
JSON Web Token (JWT)
Multiple JWT Providers
OAuth 2.0 authorization code
OAuth 2.0 client credentials
Username & Password
Advanced options
Advanced Options
OIDC & JWT-SVID Dynamic Claims
Vault Dynamic Claims
Multiple Credential Providers with Terraform
Server Workloads
Overview
Architecture Patterns
Credential lifecycle
Guides
Overview
Aembit API
Apigee
Atlassian
AWS services
Amazon RDS for MySQL
Amazon RDS for PostgreSQL
Amazon Redshift
Beyond Identity
Box
Claude
Databricks
Entra ID
Freshsales
GCP BigQuery
Gemini
GitGuardian
GitHub REST
GitLab REST
Google Drive
HashiCorp Vault
AWS Key Management Service (KMS)
Local MySQL
Local PostgreSQL
Local Redis
Looker Studio
Microsoft Graph
Okta
ChatGPT
PagerDuty
PayPal
Salesforce REST
Sauce Labs
Slack
Snowflake
Snyk
Stripe
Enable Server Workload TLS
Developer Integration
Auth methods & schemes
Troubleshooting
Advanced options
Overview
Terraform
Overview
Terraform Configuration
Audit & Report
Overview
Access Authorization Events
Audit Logs
Global Policy Compliance
Workload events
Administration
Overview
Aembit Dashboard
Overview
Users
Overview
Add a user
Roles
Overview
Add a role
Resource Sets
Overview
Create a Resource Set
Assign roles
Add a resource
Deploy a Resource Set
Identity Providers
Overview
Configure SSO auto user creation
Create SAML 2.0 IdP
Create OIDC 1.0 IdP
Sign-On Policy
Overview
Global Policy Compliance
Overview
Managing Policy Compliance
Log Streams
Overview
AWS S3
CrowdStrike SIEM
Google Cloud Storage Bucket
Splunk SIEM
Discovery
beta
Overview
Integrations
Wiz
Reference
Overview
Support matrix
Edge Components
Supported versions
Environment variables
Helm chart config options
Log levels
Troubleshoot & Support
Overview
Agent Controller Health
Agent Proxy Connectivity
Agent Proxy Debug Network Tracing
Tenant Configuration
Checking Tenant Health
2
Aembit CLI overview
Use Aembit CLI
Overview
Set up Aembit CLI
Getting credentials
Getting credentials on Windows
Command reference
Overview
aembit
aembit credentials
aembit credentials get
Troubleshooting
Changelog
3
Aembit APIs overview
Cloud API
Overview
Cloud API Reference
Edge API
Overview
Quickstart
Authentication
Overview
AWS IAM Role
AWS Metadata Service
Endpoints
Overview
auth
POST
credentials
POST
Edge API Reference
4
Overview
MCP
Overview
Authorization Server
beta
Overview
Concepts
Setup
Reference
Troubleshooting
Environment variables
Releases
Support
Status
Knowledge Base
Get Support
GitHub
Select theme
Dark
Light
Auto
Home
ai-guide
mcp
identity-gateway
MCP Identity Gateway
Documentation for the Model Context Protocol (MCP) Identity Gateway is coming soon.
