Skip to main content
PAM captures everything that happens during a session — every query, command, and response. This gives you a complete record for compliance audits and incident investigation.

​
What Gets Recorded

The content depends on the account type: PostgreSQL sessions:
  • All SQL queries executed
  • Query responses and result summaries (not full result data)
  • Timestamps for each action
SSH sessions:
  • All commands entered
  • Command output
  • Timestamps for each action
Both Web Access and CLI sessions are recorded the same way. Recording happens at the Gateway level — events are captured, encrypted, and uploaded in real-time. See Architecture for details on how this works.

​
Storage Options

Recording is always enabled. You can configure where recordings are stored at the template level — all accounts using a template inherit its storage settings.
BackendDescription
InternalStored in Infisical’s managed database
External S3Stored in your own S3 bucket
For most cases, internal storage works fine. Use External Storage if you need control over data residency or retention.

​
Viewing Recordings

  1. Go to Sessions and click on a session
  2. The session detail page shows the full log of activity
  3. Use the search bar to find specific content
Recordings are available in real-time for both active and completed sessions.

​
Next Steps

External Storage

Store recordings in your own S3 bucket.

Auditing

View the complete audit trail.