UNCLASSIFIED - NO CUI

Skip to content

Create explicit (least-privilege) authpols for Elasticsearch

Currently we have an elasticsearch authpol that allows inbound traffic from any source to Elasticsearch on 9200.

This doesn't align with Big Bang's practice of being as specific as possible with our policies.

  • Delete the current es-allow-elasticsearch authpol
  • Determine which services need their own authpol (Fluentbit, Fluentd, others?)
  • Create new authpols for the specific servicees