Skip to main content
PAM captures everything that happens during a session — every query, command, and response. This gives you a complete record for compliance audits and incident investigation.

​
What Gets Recorded

The content depends on the account type: PostgreSQL sessions:
  • All SQL queries executed
  • Query responses and result summaries (not full result data)
  • Timestamps for each action
SSH sessions:
  • All commands entered
  • Command output
  • Timestamps for each action
Both Web Access and CLI sessions are recorded the same way. Recording happens at the Gateway level — events are captured, encrypted, and uploaded in real-time. See Architecture for details on how this works.

​
Storage Options

Recording is always enabled. You can configure where recordings are stored at the template level — all accounts using a template inherit its storage settings. For most cases, internal storage works fine. Use External Storage if you need control over data residency or retention.

​
Viewing Recordings

  1. Go to Sessions and click on a session
  2. The session detail page shows the full log of activity
  3. Use the search bar to find specific content
Recordings are available in real-time for both active and completed sessions.

​
Next Steps

External Storage

Store recordings in your own S3 bucket.

Auditing

View the complete audit trail.