Set up cloud security
Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability This functionality is generally available and ready for production usage. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes.
Serverless Security
Generally available
Stack
Generally available
Elastic Security's cloud security features find risks in your cloud accounts and Kubernetes clusters. They check your configuration against security best practices, list your cloud assets, and scan your AWS EC2 Linux workloads for known vulnerabilities.
You set up each feature by adding its integration and connecting it to your cloud provider or cluster. After setup, each integration sends its results to Elastic Security, where you can review them in Cloud Security.
Each feature answers a different question about your cloud environment:
- Cloud Security Posture Management (CSPM): Checks the services in your AWS, GCP, and Azure accounts, such as storage, compute, and identity and access management (IAM), against benchmarks from the Center for Internet Security (CIS).
- Kubernetes Security Posture Management (KSPM): Checks the components of your Kubernetes clusters against CIS benchmarks.
- Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability Preview This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Preview since 9.1 This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes. Cloud Asset Discovery: Builds an inventory of the resources in your AWS, GCP, and Azure accounts.
- Cloud Native Vulnerability Management (CNVM): Scans your AWS EC2 Linux workloads for known vulnerabilities.
| Your goal | Start here |
|---|---|
| Check your AWS, GCP, or Azure accounts for misconfigurations | CSPM for AWS, CSPM for GCP, or CSPM for Azure |
| Give users access to view or manage CSPM data | CSPM privilege requirements |
| Check your Kubernetes clusters for misconfigurations | Get started with KSPM |
| Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability Preview This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Preview since 9.1 This functionality is in technical preview and is ready for evaluation. Use with caution in production; it is not recommended for mission-critical workloads. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features. Specific Support terms apply. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes. List the resources in your cloud accounts | Cloud Asset Discovery for AWS, Cloud Asset Discovery for GCP, or Cloud Asset Discovery for Azure |
| Scan your AWS EC2 Linux workloads for known vulnerabilities | Get started with CNVM → CNVM privilege requirements |
| Turn on cloud security features in a Serverless project | Enable cloud security features in Serverless |
After you set up cloud security, you can:
- Review findings, benchmarks, and vulnerabilities in Cloud Security.
- Monitor posture at a glance on the Cloud Security Posture dashboard.
- Manage cloud workload protection to detect and block threats on your Linux VMs and Kubernetes workloads at runtime.