You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: deploy-manage/_snippets/ecloud-security.md
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -3,7 +3,7 @@
3
3
In both {{ech}} and {{serverless-full}}, you can also configure [IP filters](/deploy-manage/security/ip-filtering-cloud.md) to prevent unauthorized access to your deployments and projects.
4
4
5
5
In {{ech}}, you can augment these security features in the following ways:
6
-
*[Configure private connectivity and apply VPC filtering](/deploy-manage/security/traffic-filtering.md) to establish a secure connection for your {{ecloud}} deployments to communicate with other cloud services, and restrict traffic to deployments based on those private connections.
6
+
*[Configure private connectivity and apply VPC filtering](/deploy-manage/security/private-connectivity.md) to establish a secure connection for your {{ecloud}} deployments to communicate with other cloud services, and restrict traffic to deployments based on those private connections.
7
7
* Encrypt your deployment with a [customer-managed encryption key](/deploy-manage/security/encrypt-deployment-with-customer-managed-encryption-key.md).
8
8
*[Secure your settings](/deploy-manage/security/secure-settings.md) using {{es}} and {{kib}} keystores.
9
9
* Use the list of [{{ecloud}} static IPs](/deploy-manage/security/elastic-cloud-static-ips.md) to allow or restrict communications in your infrastructure.
Copy file name to clipboardExpand all lines: deploy-manage/deploy/cloud-enterprise/working-with-deployments.md
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -57,7 +57,7 @@ From the deployment main page, you can quickly access the following configuratio
57
57
From the **Deployment > Security** view, you can manage security settings, authentication, and access controls. Refer to [Secure your clusters](../../../deploy-manage/users-roles/cluster-or-deployment-auth.md) for more details on security options for your deployments.
58
58
59
59
*[Reset the `elastic` user password](../../users-roles/cluster-or-deployment-auth/manage-elastic-user-cloud.md)
60
-
*[Set up traffic filters](../../security/traffic-filtering.md) to restrict traffic to your deployment
60
+
*[Set up IP filters](../../security/ip-filtering-ece.md) to restrict traffic to your deployment
61
61
* Configure {{es}} keystore settings, also known as [secure settings](../../security/secure-settings.md)
62
62
* Configure trust relationships for [remote clusters](../../remote-clusters/ece-enable-ccs.md)
*[I can’t SSO into my {{ecloud}} deployment.](#azure-integration-failed-sso)
108
108
*[I see some deployments in the {{ecloud}} console but not in the Azure Portal.](#azure-integration-cant-see-deployment)
109
109
*[My {{ecloud}} Azure Native ISV Service logs are not being ingested.](#azure-integration-logs-not-ingested)
@@ -319,18 +319,7 @@ $$$azure-integration-how-to-access$$$How can I access my {{ecloud}} deployment?
319
319
320
320
321
321
$$$azure-integration-modify-deployment$$$How can I modify my {{ecloud}} deployment?
322
-
: Modify your {{ecloud}} deployment in the {{ecloud}} console, which is accessed from the Azure UI through the **Advanced Settings** link on the deployment overview page. In the {{ecloud}} console you can perform a number of actions against your deployment, including:
323
-
324
-
* [Re-size](ec-customize-deployment-components.md) to increase or decrease the amount of RAM, CPU, and storage available to your deployment, or to add additional availability zones.
325
-
* [Upgrade](../../upgrade/deployment-or-cluster.md) your deployment to a new {{stack}} version.
326
-
* Enable or disable individual {{stack}} components such as APM and Machine Learning.
327
-
* [Update {{stack}} user settings](edit-stack-settings.md) in the component YML files.
328
-
* [Add or remove custom plugins](add-plugins-extensions.md).
329
-
* [Configure IP filtering](../../security/traffic-filtering.md).
330
-
* [Monitor your {{ecloud}} deployment](../../monitor/stack-monitoring/ece-ech-stack-monitoring.md) to ensure it remains healthy.
331
-
* Add or remove API keys to use the [REST API](cloud://reference/cloud-hosted/ec-api-restful.md).
332
-
* [And more](cloud-hosted.md)
333
-
322
+
: Modify your {{ecloud}} deployment in the {{ecloud}} console, which is accessed from the Azure UI through the **Advanced Settings** link on the deployment overview page. In the {{ecloud}} console you can perform [a number of actions against your deployment](/deploy-manage/deploy/elastic-cloud/cloud-hosted.md#ec_how_to_operate_elasticsearch_service).
334
323
335
324
$$$azure-integration-delete-deployment$$$How can I delete my {{ecloud}} deployment?
336
325
: Delete the deployment directly from the Azure console. The delete operation performs clean-up activities in the Elastic console to ensure any running components are removed, so that no additional charges occur.
@@ -349,7 +338,7 @@ $$$azure-integration-monitor$$$How do I monitor my existing Azure services?
349
338
350
339
351
340
::::{note}
352
-
If you want to send platform logs to a deployment that has [IP or Private Link traffic filters](../../security/traffic-filtering.md)enabled, then you need to contact [the Elastic Support Team](#azure-integration-support) to perform additional configurations. Refer support to the article [Azure++ Resource Logs blocked by Traffic Filters](https://support.elastic.co/knowledge/18603788).
341
+
If you want to send platform logs to a deployment that has [network security policies](/deploy-manage/security/network-security.md)applied, then you need to contact [the Elastic Support Team](#azure-integration-support) to perform additional configurations. Refer support to the article [Azure++ Resource Logs blocked by Traffic Filters](https://support.elastic.co/knowledge/18603788).
353
342
354
343
::::
355
344
@@ -462,7 +451,7 @@ $$$azure-integration-authorization-access$$$I receive an error message about not
462
451
Elastic is not currently integrated with Azure user management, so sharing deployment resources through the Cloud console with other Azure users is not possible. However, sharing direct access to these resources is possible. For details, check [Is the {{ecloud}} Azure Native ISV Service connected with Azure user management?](#azure-integration-azure-user-management).
: When creating a new {{ecloud}} deployment, the deployment creation may fail with a `Your deployment failed` error. The process results with a status message such as:
One possible cause of a deployment creation failure is the default traffic filtering rules. Deployments fail to create if a previously created traffic filter has enabled the **Include by default** option. When this option is enabled, traffic to the deployment is blocked, including traffic that is part of the {{ecloud}} Azure Native ISV Service. As a result, some of the integration components are not successfully provisioned and the deployment creation fails.
469
+
One possible cause of a deployment creation failure is the default network security policies. Deployments fail to create if a previously created network security policy has enabled the **Include by default** option. When this option is enabled, traffic to the deployment is blocked, including traffic that is part of the {{ecloud}} Azure Native ISV Service. As a result, some of the integration components are not successfully provisioned and the deployment creation fails.
481
470
482
471
Follow these steps to resolve the problem:
483
472
484
473
1. Login to the [{{ecloud}} Console](https://cloud.elastic.co?page=docs&placement=docs-body).
485
-
2. Go to the [Traffic filters page](https://cloud.elastic.co/deployment-features/traffic-filters).
474
+
2. Go to the [Network security page](https://cloud.elastic.co/deployment-features/traffic-filters).
486
475
3. Edit the traffic filter and disable the **Include by default** option.
:alt: The Include by default option under Add to Deployments on the Traffic Filter page
490
-
:::
491
-
492
476
4. In Azure, create a new {{ecloud}} deployment.
493
-
5. After the deployment has been created successfully, go back to the [Traffic filters page](https://cloud.elastic.co/deployment-features/traffic-filters) in {{ecloud}} and re-enable the **Include by default** option.
477
+
5. After the deployment has been created successfully, go back to the [Network security page](https://cloud.elastic.co/deployment-features/traffic-filters) in {{ecloud}} and re-enable the **Include by default** option.
494
478
495
479
496
480
If your deployment still does not create successfully, [contact the Elastic Support Team](#azure-integration-support) for assistance.
@@ -511,7 +495,7 @@ Mimicking this metadata by manually adding tags to an {{ecloud}} deployment will
511
495
512
496
$$$azure-integration-logs-not-ingested$$$My {{ecloud}} Azure Native ISV Service logs are not being ingested.
513
497
: * When you set up monitoring for your Azure services, if your Azure and Elastic resources are in different subscriptions, you need to make sure that the `Microsoft.Elastic` resource provider is registered in the subscription in which the Azure resources exist. Check [How do I monitor my existing Azure services?](#azure-integration-monitor) for details.
514
-
* If you are using [IP or Private Link traffic filters](../../security/traffic-filtering.md), reach out to [the Elastic Support Team](#azure-integration-support).
498
+
* If you are using [network security policies](/deploy-manage/security/network-security.md), reach out to [the Elastic Support Team](#azure-integration-support).
Copy file name to clipboardExpand all lines: deploy-manage/deploy/elastic-cloud/ec-customize-deployment-components.md
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -129,7 +129,7 @@ Refer to [Manage your Integrations Server](manage-integrations-server.md) to lea
129
129
130
130
## Security [ec_security]
131
131
132
-
Here, you can configure features that keep your deployment secure: reset the password for the `elastic` user, set up traffic filters, and add settings to the {{es}} keystore. You can also set up remote connections to other deployments.
132
+
Here, you can configure features that keep your deployment secure: reset the password for the `elastic` user, set up network security, and add settings to the {{es}} keystore. You can also set up remote connections to other deployments.
Copy file name to clipboardExpand all lines: deploy-manage/deploy/elastic-cloud/heroku.md
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -82,7 +82,7 @@ You might want to add more layers of security to your deployment, such as:
82
82
83
83
* Add more users to the deployment with third-party authentication providers and services like [SAML](../../users-roles/cluster-or-deployment-auth/saml.md), [OpenID Connect](../../users-roles/cluster-or-deployment-auth/openid-connect.md), or [Kerberos](../../users-roles/cluster-or-deployment-auth/kerberos.md).
84
84
* Do not use clients that only support HTTP to connect to {{ecloud}}. If you need to do so, you should use a reverse proxy setup.
85
-
* Create [traffic filters](../../security/traffic-filtering.md) and apply them to your deployments.
85
+
* Create [network security policies](/deploy-manage/security/network-security.md) and apply them to your deployments.
86
86
* If needed, you can [reset](../../users-roles/cluster-or-deployment-auth/built-in-users.md) the `elastic` password.
87
87
88
88
### Scale or adjust your deployment [echscale_or_adjust_your_deployment]
0 commit comments