From 39d3eae746b884726a4a33da8ca35a8ae787a819 Mon Sep 17 00:00:00 2001 From: shainaraskas Date: Fri, 4 Sep 2026 16:06:40 -0400 Subject: [PATCH 1/2] Document per-source description option for network security policies Co-authored-by: Cursor --- deploy-manage/security/ip-filtering-cloud.md | 2 +- deploy-manage/security/private-connectivity-aws.md | 2 +- deploy-manage/security/private-connectivity-azure.md | 2 +- deploy-manage/security/private-connectivity-gcp.md | 4 ++-- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/deploy-manage/security/ip-filtering-cloud.md b/deploy-manage/security/ip-filtering-cloud.md index 05cd4175a6..b88cc93c94 100644 --- a/deploy-manage/security/ip-filtering-cloud.md +++ b/deploy-manage/security/ip-filtering-cloud.md @@ -78,7 +78,7 @@ To create an IP filter: 5. Select the cloud provider and region for the IP filter. 6. Add a meaningful name and description for the IP filter. 7. Under **Access control**, select whether the IP filter should be applied to ingress or egress traffic. Currently, only ingress traffic filters are supported. -8. Add one or more allowed sources using IPv4, or a range of addresses with CIDR. +8. Add one or more allowed sources using IPv4, or a range of addresses with CIDR. For each source, you can select **Add description** to add an optional description that helps you identify the source later. 9. Optional: Under **Apply to resources**, associate the new filter with one or more deployments or projects. After you associate the IP filter with a deployment or project, it starts filtering traffic. 10. To automatically attach this IP filter to new deployments or projects, select **Apply to future resources by default**. 11. Click **Create**. diff --git a/deploy-manage/security/private-connectivity-aws.md b/deploy-manage/security/private-connectivity-aws.md index b5a4b7f37f..c57463dfb1 100644 --- a/deploy-manage/security/private-connectivity-aws.md +++ b/deploy-manage/security/private-connectivity-aws.md @@ -375,7 +375,7 @@ Create a new private connection policy. Private connection policies are bound to a single resource type and region, and can be assigned only to resources with the same resource type and in the same region. If you want to associate a policy with multiple resource types or resources in multiple regions, then you have to recreate the policy for all applicable resource types and regions. ::: 6. Under **Connectivity**, select **PrivateLink**. -7. Optional: Under **VPC filter**, enter your VPC endpoint ID. You should only specify a VPC filter if you want to filter traffic to your deployment or project. +7. Optional: Under **VPC filter**, enter your VPC endpoint ID. You should only specify a VPC filter if you want to filter traffic to your deployment or project. For each VPC filter, you can select **Add description** to add an optional description that helps you identify the filter later. If you don't specify a VPC filter, then the private connection policy acts only as a record that you've established private connectivity between AWS and Elastic in the applicable region. diff --git a/deploy-manage/security/private-connectivity-azure.md b/deploy-manage/security/private-connectivity-azure.md index 58b0fab9b8..252c4ea6df 100644 --- a/deploy-manage/security/private-connectivity-azure.md +++ b/deploy-manage/security/private-connectivity-azure.md @@ -232,7 +232,7 @@ The Private Link connection will be approved automatically after the private con Private connection policies are bound to a single resource type and region, and can be assigned only to resources with the same resource type and in the same region. If you want to associate a policy with multiple resource types or resources in multiple regions, then you have to recreate the policy for all applicable resource types and regions. ::: 6. Under **Connectivity**, select **PrivateLink**. -7. Enter your private endpoint **Resource name** and **Resource ID**. When applied to a deployment or project, this information will be used to filter traffic. +7. Enter your private endpoint **Resource name** and **Resource ID**. When applied to a deployment or project, this information will be used to filter traffic. You can select **Add description** to add an optional description that helps you identify the filter later. :::{tip} You can apply multiple policies to a single deployment or project. The policies can be of different types. In case of multiple policies, traffic can match any associated policy to be forwarded to the resource. If none of the policies match, the request is rejected with `403 Forbidden`. diff --git a/deploy-manage/security/private-connectivity-gcp.md b/deploy-manage/security/private-connectivity-gcp.md index 8d138154a8..2118ad1faa 100644 --- a/deploy-manage/security/private-connectivity-gcp.md +++ b/deploy-manage/security/private-connectivity-gcp.md @@ -202,9 +202,9 @@ Create a new private connection policy. Private connection policies are bound to a single region, and can be assigned only to deployments in the same region. If you want to associate a policy with resources in multiple regions, then you have to create the same policy in all the regions you want to apply it to. ::: 6. Under **Connectivity**, select **PrivateLink**. -7. Optional: Under **VPC filter**, enter your Private Service Connect endpoint connection ID. You should only specify a Private Service Connect endpoint connection ID if you want to filter traffic to your deployment. +7. Optional: Under **VPC filter**, enter your Private Service Connect endpoint connection ID. You should only specify a Private Service Connect endpoint connection ID if you want to filter traffic to your deployment. For each VPC filter, you can select **Add description** to add an optional description that helps you identify the filter later. - If you don't specify a VPC filter, then the private connection policy acts only as a record that you've established private connectivity between AWS and Elastic in the applicable region. + If you don't specify a VPC filter, then the private connection policy acts only as a record that you've established private connectivity between GCP and Elastic in the applicable region. :::{tip} You can apply multiple policies to a single deployment. The policies can be of different types. In case of multiple policies, traffic can match any associated policy to be forwarded to the resource. If none of the policies match, the request is rejected with `403 Forbidden`. From 0344e4e91e45c2ad0700353bc56521cb06ee49a2 Mon Sep 17 00:00:00 2001 From: shainaraskas <58563081+shainaraskas@users.noreply.github.com> Date: Tue, 8 Sep 2026 22:23:20 -0400 Subject: [PATCH 2/2] Apply batched suggestions from code review Co-authored-by: wajihaparvez --- deploy-manage/security/ip-filtering-cloud.md | 2 +- deploy-manage/security/private-connectivity-aws.md | 2 +- deploy-manage/security/private-connectivity-azure.md | 2 +- deploy-manage/security/private-connectivity-gcp.md | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/deploy-manage/security/ip-filtering-cloud.md b/deploy-manage/security/ip-filtering-cloud.md index b88cc93c94..a520cd74b2 100644 --- a/deploy-manage/security/ip-filtering-cloud.md +++ b/deploy-manage/security/ip-filtering-cloud.md @@ -78,7 +78,7 @@ To create an IP filter: 5. Select the cloud provider and region for the IP filter. 6. Add a meaningful name and description for the IP filter. 7. Under **Access control**, select whether the IP filter should be applied to ingress or egress traffic. Currently, only ingress traffic filters are supported. -8. Add one or more allowed sources using IPv4, or a range of addresses with CIDR. For each source, you can select **Add description** to add an optional description that helps you identify the source later. +8. Add one or more allowed sources using IPv4, or a range of addresses with CIDR. For each source, select **Add description** to add an optional description that helps you identify the source later. 9. Optional: Under **Apply to resources**, associate the new filter with one or more deployments or projects. After you associate the IP filter with a deployment or project, it starts filtering traffic. 10. To automatically attach this IP filter to new deployments or projects, select **Apply to future resources by default**. 11. Click **Create**. diff --git a/deploy-manage/security/private-connectivity-aws.md b/deploy-manage/security/private-connectivity-aws.md index c57463dfb1..e7696752b2 100644 --- a/deploy-manage/security/private-connectivity-aws.md +++ b/deploy-manage/security/private-connectivity-aws.md @@ -375,7 +375,7 @@ Create a new private connection policy. Private connection policies are bound to a single resource type and region, and can be assigned only to resources with the same resource type and in the same region. If you want to associate a policy with multiple resource types or resources in multiple regions, then you have to recreate the policy for all applicable resource types and regions. ::: 6. Under **Connectivity**, select **PrivateLink**. -7. Optional: Under **VPC filter**, enter your VPC endpoint ID. You should only specify a VPC filter if you want to filter traffic to your deployment or project. For each VPC filter, you can select **Add description** to add an optional description that helps you identify the filter later. +7. Optional: Under **VPC filter**, enter your VPC endpoint ID. You should only specify a VPC filter if you want to filter traffic to your deployment or project. For each VPC filter, select **Add description** to add an optional description that helps you identify the filter later. If you don't specify a VPC filter, then the private connection policy acts only as a record that you've established private connectivity between AWS and Elastic in the applicable region. diff --git a/deploy-manage/security/private-connectivity-azure.md b/deploy-manage/security/private-connectivity-azure.md index 252c4ea6df..025d849db5 100644 --- a/deploy-manage/security/private-connectivity-azure.md +++ b/deploy-manage/security/private-connectivity-azure.md @@ -232,7 +232,7 @@ The Private Link connection will be approved automatically after the private con Private connection policies are bound to a single resource type and region, and can be assigned only to resources with the same resource type and in the same region. If you want to associate a policy with multiple resource types or resources in multiple regions, then you have to recreate the policy for all applicable resource types and regions. ::: 6. Under **Connectivity**, select **PrivateLink**. -7. Enter your private endpoint **Resource name** and **Resource ID**. When applied to a deployment or project, this information will be used to filter traffic. You can select **Add description** to add an optional description that helps you identify the filter later. +7. Enter your private endpoint **Resource name** and **Resource ID**. When applied to a deployment or project, this information will be used to filter traffic. Select **Add description** to add an optional description that helps you identify the filter later. :::{tip} You can apply multiple policies to a single deployment or project. The policies can be of different types. In case of multiple policies, traffic can match any associated policy to be forwarded to the resource. If none of the policies match, the request is rejected with `403 Forbidden`. diff --git a/deploy-manage/security/private-connectivity-gcp.md b/deploy-manage/security/private-connectivity-gcp.md index 2118ad1faa..72ebd10b83 100644 --- a/deploy-manage/security/private-connectivity-gcp.md +++ b/deploy-manage/security/private-connectivity-gcp.md @@ -202,7 +202,7 @@ Create a new private connection policy. Private connection policies are bound to a single region, and can be assigned only to deployments in the same region. If you want to associate a policy with resources in multiple regions, then you have to create the same policy in all the regions you want to apply it to. ::: 6. Under **Connectivity**, select **PrivateLink**. -7. Optional: Under **VPC filter**, enter your Private Service Connect endpoint connection ID. You should only specify a Private Service Connect endpoint connection ID if you want to filter traffic to your deployment. For each VPC filter, you can select **Add description** to add an optional description that helps you identify the filter later. +7. Optional: Under **VPC filter**, enter your Private Service Connect endpoint connection ID. You should only specify a Private Service Connect endpoint connection ID if you want to filter traffic to your deployment. For each VPC filter, select **Add description** to add an optional description that helps you identify the filter later. If you don't specify a VPC filter, then the private connection policy acts only as a record that you've established private connectivity between GCP and Elastic in the applicable region.