Have you ever wondered how you can use the technologies built into Elastic Cloud to improve your deployment's security posture? Learn about security best practices for built-in security features such as encryption by default for data in transit or at rest, and also the tools you can use to enhance security such as IP filtering and our AWS PrivateLink integration.

1. 1
Advanced security with
Elastic Cloud: from
PrivateLink to SSO
Shubha Anjur Tupil
Senior Product Manager, Elastic Cloud
Igor Kupczyński
Principal Software Engineer, Elastic Cloud

2. 2
This presentation and the accompanying oral presentation contain forward-looking statements, including statements
concerning plans for future offerings; the expected strength, performance or benefits of our offerings; and our future
operations and expected performance. These forward-looking statements are subject to the safe harbor provisions
under the Private Securities Litigation Reform Act of 1995. Our expectations and beliefs in light of currently
available information regarding these matters may not materialize. Actual outcomes and results may differ materially
from those contemplated by these forward-looking statements due to uncertainties, risks, and changes in
circumstances, including, but not limited to those related to: the impact of the COVID-19 pandemic on our business
and our customers and partners; our ability to continue to deliver and improve our offerings and successfully
develop new offerings, including security-related product offerings and SaaS offerings; customer acceptance and
purchase of our existing offerings and new offerings, including the expansion and adoption of our SaaS offerings;
our ability to realize value from investments in the business, including R&D investments; our ability to maintain and
expand our user and customer base; our international expansion strategy; our ability to successfully execute our
go-to-market strategy and expand in our existing markets and into new markets, and our ability to forecast customer
retention and expansion; and general market, political, economic and business conditions.
Additional risks and uncertainties that could cause actual outcomes and results to differ materially are included in
our filings with the Securities and Exchange Commission (the “SEC”), including our Annual Report on Form 10-K for
the most recent fiscal year, our quarterly report on Form 10-Q for the most recent fiscal quarter, and any
subsequent reports filed with the SEC. SEC filings are available on the Investor Relations section of Elastic’s
website at ir.elastic.co and the SEC’s website at www.sec.gov.
Any features or functions of services or products referenced in this presentation, or in any presentations, press
releases or public statements, which are not currently available or not currently available as a general availability
release, may not be delivered on time or at all. The development, release, and timing of any features or functionality
described for our products remains at our sole discretion. Customers who purchase our products and services
should make the purchase decisions based upon services and product features and functions that are currently
available.
All statements are made only as of the date of the presentation, and Elastic assumes no obligation to, and does not
currently intend to, update any forward-looking statements or statements relating to features or functions of services
or products, except as required by law.
Forward-Looking Statements

3. I’d like to know more about the
security posture of Elastic
Cloud, and what can I do to
secure my data.
Elastic customers

4. SaaS Orchestration
Elastic Cloud
on Kubernetes
Elastic
Cloud
Elastic Cloud
Enterprise
Elastic Enterprise Search Elastic SecurityElastic Observability
Kibana
Elasticsearch
Beats Logstash
Powered by the
Elastic Stack
3 solutions
Deployed
anywhere
Elastic technology

5. Fast time to value
Instant global infrastructure &
operations encourage experiments
and get you to market.
Operational Simplicity
Focus on driving business value
versus managing infrastructure,
operations or integrating products.
Secure from the start
All deployments automatically have the
best security by default, no configuration.
Elastic compliance included.
Agility
Pivot quickly to respond to
competitive pressure,
opportunity, or changing
customer expectations.
Development Simplicity
A single programming model and
integrated product portfolio that
can address search,
observability, security.
Reduce Risk
Source global infrastructure, ops
and support experts from the
originators of the Elasticsearch
technology on any cloud.
SECURITY & RISK REDUCTIONSPEED SIMPLICITY
SaaS and managed services

6. Fast time to value
Instant global infrastructure &
operations encourage experiments
and get you to market.
Operational Simplicity
Focus on driving business value
versus managing infrastructure,
operations or integrating products.
Secure from the start
All deployments automatically have the
best security by default, no configuration.
Elastic compliance included.
Agility
Pivot quickly to respond to
competitive pressure,
opportunity, or changing
customer expectations.
Development Simplicity
A single programming model and
integrated product portfolio that
can address search,
observability, security.
Reduce Risk
Source global infrastructure, ops
and support experts from the
originators of the Elasticsearch
technology on any cloud.
SECURITY & RISK REDUCTIONSPEED SIMPLICITY
SaaS and managed services

7. Build on Elastic Stack
Secure by default

8. Build on Elastic Stack
Managed via Kibana UI and API
• Role based access control
RBAC
• Attribute based access
control (ABAC
• Permissions at index,
document, and field level
Single-sign on
• SAML (e.g. Okta)
• Open ID (e.g. Google)
• Kerberos
Authentication & authorization

9. Build on Elastic Stack
Same day releases

10. Encryption at Rest
Data volumes encrypted with LUKS

11. Encryption at Rest
Snapshots — backups in encrypted object storage

12. Workload Isolation
Deployment
• Elasticsearch instances +
associated Elastic Stack
products
• Exclusive, dedicated to a
customer
Allocator
• One of the “workers” —
servers hosting the
workloads

13. Workload isolation

14. Network Security
Traffic filters

15. Network Security
Encryption in transit

16. • Kernel and OS patches:
keeping the hosts
up-to-date
• Cloud-provider
agnostic data volume
encryption at rest with
LUKS
• Backups stored in
encrypted object
storage
• Dedicated,
per-customer
Elasticsearch
deployments
• Each Elastic stack
component runs in a
docker container
• Resource usage limits
• Encryption in transit
of data to, from, and
within your
deployments
• IP filtering
• PrivateLink
Host level security Workload isolation Network security
Multiple layers of security controls
Defense in depth
• Role and attribute
based access control
• Single sign-on: SAML,
OpenID, Kerberos
• Same day releases
with one-click
upgrades
Elastic stack security

17. Shared
responsibility
model

18. https://www.elastic.co/cloud/security
Continuous
compliance
What customer type do you
need to serve?
• HIPAA
• CSA Star Level 2
• SOC 2 Type 1, Type 2, and SOC 3
• ISO 27001, ISO 27107, ISO 27018
• FedRAMP authorized at Moderate
impact level, deployable to AWS
GovCloud (US
• Elastic Cloud operated in
compliance with GDPR principles

19. 19
PrivateLink Demo

20. 20
Thank You!