--- title: Configuring Just-in-Time Access to Amazon RDS with... description: A step-by-step tutorial demonstrates configuring just-in-time (JIT) privilege escalation for Amazon RDS PostgreSQL databases using Teleport Enterprise and... canonical: https://daily.dev/posts/configuring-just-in-time-access-to-amazon-rds-with-teleport-and-slack-hxmgrybdb twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Configuring Just-in-Time Access to Amazon RDS with Teleport and Slack | daily.dev og:description: A step-by-step tutorial demonstrates configuring just-in-time (JIT) privilege escalation for Amazon RDS PostgreSQL databases using Teleport Enterprise and... og:url: https://daily.dev/posts/configuring-just-in-time-access-to-amazon-rds-with-teleport-and-slack-hxmgrybdb og:image: https://api.daily.dev/og/posts/HXMGrYbdb.png og:image:alt: Configuring Just-in-Time Access to Amazon RDS with Teleport and Slack og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Configuring Just-in-Time Access to Amazon RDS with Teleport and Slack **[Teleport](https://daily.dev/sources/teleport)** · 11 min read · 0 upvotes · 0 comments ## Summary A step-by-step tutorial demonstrates configuring just-in-time (JIT) privilege escalation for Amazon RDS PostgreSQL databases using Teleport Enterprise and Slack ChatOps integration. It walks through creating Teleport roles for a contractor, DBA, and team lead, requesting and approving time-bound elevated access via tsh and tctl commands, and wiring up a Slack plugin so approvers get notified and can approve requests from a Slack channel. The scenario shows a contractor (John) requesting temporary DBA access approved by a team lead (Dave), with access expiring automatically after the configured session TTL. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I set up time-bound access requests to a database with Teleport? Create a Teleport role with max_session_ttl set to the desired duration (for example, 1h), then have a user run tsh login with the --request-roles flag naming that role. An authorized reviewer with review_requests permissions approves the request via tctl request approve, granting temporary access that automatically expires after the session TTL. _Anyone building least-privilege database access workflows can track Teleport patterns like this on daily.dev._ ### How can I get Slack notifications for Teleport access requests? Install the Teleport Slack plugin (teleport-access-slack) on the Teleport proxy host, configure a teleport-slack.toml file with the Teleport auth server address, plugin identity certificates, and the Slack bot OAuth token, then run teleport-slack start. Pending access requests then post directly to the configured Slack channel for approval or denial. _Teams wiring ChatOps into their access control setup can follow integrations like this via daily.dev._ ## Similar posts on daily.dev - [Beyond IAM: Temporary Cloud Access That Works Across AWS and Azure](https://daily.dev/posts/beyond-iam-temporary-cloud-access-that-works-across-aws-and-azure-bz1gxdp1l) · AWS Fundamentals · 0 upvotes · 0 comments --- Tags: [#aws](https://daily.dev/tags/aws), [#postgresql](https://daily.dev/tags/postgresql), [#slack](https://daily.dev/tags/slack) [View this post on daily.dev](https://daily.dev/posts/configuring-just-in-time-access-to-amazon-rds-with-teleport-and-slack-hxmgrybdb) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Configuring Just-in-Time Access to Amazon RDS with Teleport and Slack","url":"https://daily.dev/posts/configuring-just-in-time-access-to-amazon-rds-with-teleport-and-slack-hxmgrybdb","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/configuring-just-in-time-access-to-amazon-rds-with-teleport-and-slack-hxmgrybdb"},"datePublished":"2026-08-23T12:23:23.943Z","dateModified":"2026-08-23T12:58:49.657Z","description":"A step-by-step tutorial demonstrates configuring just-in-time (JIT) privilege escalation for Amazon RDS PostgreSQL databases using Teleport Enterprise and...","image":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","thumbnailUrl":"https://media.daily.dev/image/upload/s--58gMhC4P--/f_auto/v1722860399/public/Placeholder%2012","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/configuring-just-in-time-access-to-amazon-rds-with-teleport-and-slack-hxmgrybdb","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws,postgresql,slack","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Configuring Just-in-Time Access to Amazon RDS with Teleport and Slack"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/configuring-just-in-time-access-to-amazon-rds-with-teleport-and-slack-hxmgrybdb#faq","mainEntity":[{"@type":"Question","name":"How do I set up time-bound access requests to a database with Teleport?","acceptedAnswer":{"@type":"Answer","text":"Create a Teleport role with max_session_ttl set to the desired duration (for example, 1h), then have a user run tsh login with the --request-roles flag naming that role. An authorized reviewer with review_requests permissions approves the request via tctl request approve, granting temporary access that automatically expires after the session TTL. Anyone building least-privilege database access workflows can track Teleport patterns like this on daily.dev."}},{"@type":"Question","name":"How can I get Slack notifications for Teleport access requests?","acceptedAnswer":{"@type":"Answer","text":"Install the Teleport Slack plugin (teleport-access-slack) on the Teleport proxy host, configure a teleport-slack.toml file with the Teleport auth server address, plugin identity certificates, and the Slack bot OAuth token, then run teleport-slack start. Pending access requests then post directly to the configured Slack channel for approval or denial. Teams wiring ChatOps into their access control setup can follow integrations like this via daily.dev."}}]} ```