Secure communication with the Elastic Stack

Use role-based access control or API keys to grant APM Server users access to secured resources.

Manage access on a feature-by-feature basis by creating several custom feature-related roles and assigning one or more of these roles to each APM Server user based on which features they need to access.

Read more in Use feature roles →

Instead of using usernames and passwords, you can use API keys to grant access to Elasticsearch resources. You can set API keys to expire at a certain time, and you can explicitly invalidate them.

Read more in Grant access using API keys →

After privileged users have been created, use authentication to connect to a secured Elastic cluster.

For secure communication between APM Server and APM Agents, see Secure communication with APM agents.

A reference of all available SSL configuration settings is also available.