You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
## What is this?
- Second cut at landing page for
https://github.com/elastic/docs-projects/issues/346, because the first
draft started to disgust me almost immediately.
- (first cut: #703)
## Summary
- Intro rewrite - Replaced generic intro with specific bullet points
explaining exactly what's on the page
- Restructured security features section - Changed from vertical
comparison tables to tab-based organization by deployment type
- Security topics simplified - Cleaned up redundant descriptions in the
four main security topic areas
- Added "Next steps" section - New conclusion with clear paths to
deployment-specific documentation
- Removed "Using this documentation" section
- Integrated essential guidance into a brief note under Security topics
Consolidated ECE/ECK information
- Combined identical deployment types to reduce redundancy
---------
Co-authored-by: florent-leborgne <[email protected]>
This section covers how to secure your Elastic environment. Learn how to implement TLS encryption, network security controls, and data protection measures.
78
+
This overview page helps you understand Elastic's security capabilities across different deployment types. You'll find:
79
+
80
+
- Key security features for protecting your Elastic deployment
81
+
- Security capabilities specific to each deployment type
82
+
- Comparison tables showing feature availability and configurability by deployment type
83
+
- Links to detailed implementation guides
79
84
80
85
## Security overview
81
86
82
-
An Elastic implementation comprises many moving parts: {es} nodes forming the cluster, {kib} instances, additional stack components such as Logstash and Beats, and various clients and integrations communicating with your deployment.
87
+
An Elastic implementation comprises many moving parts: {{es}} nodes forming the cluster, {{kib}} instances, additional stack components such as Logstash and Beats, and various clients and integrations communicating with your deployment.
83
88
84
89
To keep your data secured, Elastic offers comprehensive security features that:
85
90
- Prevent unauthorized access to your deployment
86
91
- Encrypt communications between components
87
92
- Protect data at rest
88
93
- Secure sensitive settings and saved objects
89
94
90
-
Security requirements and capabilities vary by deployment. Features may be managed automatically by Elastic, require configuration, or must be fully self-managed. Refer to [Security by deployment type](#security-by-deployment-type) for details.
95
+
:::{note}
96
+
The availability and configurability of security features vary by deployment type. Refer to [Security by deployment type](#security-features-by-deployment-type) for a comparison table.
97
+
:::
91
98
92
-
::::{tip}
93
-
See the [Deployment overview](/deploy-manage/deploy.md) to understand your options for deploying Elastic.
94
-
::::
99
+
## Security topics
95
100
96
-
### Security by deployment type
101
+
The documentation is organized into four main areas.
97
102
98
-
Security features have one of these statuses across deployment types:
103
+
:::{note}
104
+
Throughout the documentation, you'll see deployment type indicators that show which content applies to specific deployment types. Focus on sections tagged with your deployment type and look for subsections specifically addressing your deployment model.
105
+
:::
99
106
100
-
| Status | Description |
101
-
|--------|-------------|
102
-
|**Managed**| Handled automatically by Elastic with no user configuration needed |
103
-
|**Configurable**| Built-in feature that needs your configuration (like IP filters or passwords) |
104
-
|**Self-managed**| Infrastructure-level security you implement and maintain |
105
-
|**N/A**| Not available for this deployment type |
107
+
### 1. Secure your hosting environment
108
+
109
+
The [security of your hosting environment](security/secure-hosting-environment.md) forms the foundation of your overall security posture. This section covers environment-specific security controls:
106
110
107
-
#### Communication security
111
+
-[**Elastic Cloud Hosted and Serverless**](security/secure-your-elastic-cloud-organization.md)
[Secure your clients and integrations](security/secure-clients-integrations.md) to ensure secure communication between your applications and Elastic:
138
135
139
-
Throughout this security documentation, you'll see deployment type indicators that show which content applies to specific deployment types. Each section clearly identifies which deployment types it applies to, and deployment-specific details are separated within each topic.
136
+
-[**Client security**](security/httprest-clients-security.md): Best practices for securely connecting applications to {{es}}
137
+
-**Integration security**: Secure configuration for Beats, Logstash, and other integrations
140
138
141
-
To get the most relevant information for your environment, focus on sections tagged with your deployment type and look for subsections specifically addressing your deployment model.
139
+
## Security features by deployment type
142
140
143
-
## Security topics
141
+
Security feature availability varies by deployment type, with each feature having one of the following statuses:
144
142
145
-
This security documentation is organized into four main areas:
143
+
|**Status**|**Description**|
144
+
|--------|-------------|
145
+
|**Managed**| Handled automatically by Elastic with no user configuration needed |
146
+
|**Configurable**| Built-in feature that needs your configuration (like IP filters or passwords) |
147
+
|**Self-managed**| Infrastructure-level security you implement and maintain |
148
+
|**N/A**| Not available for this deployment type |
146
149
147
-
% TODO: Add links to the sections below
150
+
Select your deployment type below to see what's available and how implementation responsibilities are distributed:
148
151
149
-
### 1. Secure your hosting environment
152
+
::::{tab-set}
153
+
:group: deployment-type
150
154
151
-
The security of your hosting environment forms the foundation of your overall security posture. This section covers environment-specific security controls:
155
+
:::{tab-item} Elastic Cloud Hosted
156
+
:sync: cloud-hosted
152
157
153
-
-**Elastic Cloud Hosted and Serverless**: Organization-level SSO, role-based access control, and cloud API keys
154
-
-**Elastic Cloud Enterprise**: TLS certificates, role-based access control, and cloud API keys
0 commit comments