Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -39,12 +39,6 @@ For detailed {{es-serverless}} project rates, refer to the [{{es-serverless}} pr

{{es-serverless}} projects store data in the [Search AI Lake](/deploy-manage/deploy/elastic-cloud/project-settings.md#elasticsearch-manage-project-search-ai-lake-settings). You are charged per GB of stored data at rest. Note that if you perform operations at ingest such as vectorization or enrichment, the size of your stored data will differ from the size of the original source data.

## Serverless Plus add-on [elasticsearch-billing-serverless-plus-add-on]

The [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) is an optional add-on for {{es-serverless}} projects. It includes enterprise features such as IP filtering, private connectivity, and {{cps}} (coming soon).

Serverless Plus is free for a limited promotional period. Enabling or using features included in the add-on opts your project in. When the promotional period ends, a charge for the add-on is applied as a percentage of the project's ECUs. To learn more about the add-on and the promotional period, refer to [Project features and add-ons](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus).

## Managing {{es}} costs [elasticsearch-billing-managing-elasticsearch-costs]

You can control costs using the following strategies:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -38,13 +38,3 @@ To learn about billing dimensions for specific offerings, refer to:

If your subscription level is Standard, there is no separate charge for Support reflected on your bill. If your subscription level is Gold, Platinum, or Enterprise, a charge is made for Support as a percentage (%) of the ECUs. To find out more about our support levels, go to [https://www.elastic.co/support](https://www.elastic.co/support).

### Serverless Plus [serverless-plus-add-on]

:::{include} /deploy-manage/deploy/_snippets/serverless-plus.md
:::

#### Availability [serverless-plus-add-on-availability]

:::{include} /deploy-manage/deploy/_snippets/serverless-plus-availability.md
:::

13 changes: 0 additions & 13 deletions deploy-manage/deploy/_snippets/serverless-plus-availability.md

This file was deleted.

11 changes: 0 additions & 11 deletions deploy-manage/deploy/_snippets/serverless-plus.md

This file was deleted.

Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ This table compares core identity, access, and platform capabilities between {{e
| **Email service** | ✅ | ✅ | Preconfigured email connector available - [Learn more about limits and usage](/deploy-manage/deploy/elastic-cloud/tools-apis.md#elastic-cloud-email-service) |
| **Hardware configuration** | Limited control | Managed | Hardware choices are managed by Elastic |
| **High availability** | ✅ | ✅ | Automatic resilience |
| **Network security** | IP filtering, private connectivity (VPCs, PrivateLink) | IP filtering, private connectivity (VPCs, PrivateLink) | Private connectivity for Serverless projects is currently supported in AWS regions only. Requires the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus). |
| **Network security** | IP filtering, private connectivity (VPCs, PrivateLink) | IP filtering, private connectivity (VPCs, PrivateLink) | Private connectivity for Serverless projects is currently supported in AWS regions only.<br><br>For Observability projects, requires [Observability Complete](/solutions/observability/observability-serverless-feature-tiers.md).<br><br>For Security projects, requires [Security Analytics Complete](/solutions/security/security-serverless-feature-tiers.md).|
| **[API keys](/deploy-manage/api-keys.md)** | ✅ | ✅ | Available across {{ech}} and Serverless using deployment/project and cloud API key types. |
| **[Native realm authentication](/deploy-manage/users-roles/cluster-or-deployment-auth/native.md)** | ✅ | ❌ | {{serverless-short}} does not support {{es}} authentication realms. User authentication is managed at the [organization level](/deploy-manage/users-roles/cloud-organization.md). |
| **Role-based access control** | ✅ | ✅ | In Serverless, RBAC is managed at organization level with optional project custom roles. |
Expand Down
25 changes: 5 additions & 20 deletions deploy-manage/deploy/elastic-cloud/project-settings.md
Original file line number Diff line number Diff line change
Expand Up @@ -59,17 +59,12 @@ $$$elasticsearch-manage-project-search-power-settings$$$

## Project features and add-ons [project-features-add-ons]

Project features and add-ons control which capabilities are available in your serverless project and how they are billed. What you can configure depends on your project type:
Project features and add-ons control which capabilities are available in your serverless project and how they are billed. What you can configure depends on your project type:

* [{{es-serverless}} project features](#es-serverless-project-features)
* [{{sec-serverless}} project features](#elastic-sec-project-features)
* [{{obs-serverless}} project features](#obs-serverless-project-features)

[Serverless Plus](#serverless-plus) is included at no additional charge in the Security Analytics Complete and Observability Complete feature tiers, and is offered as an optional add-on for {{es}} projects.

### {{es-serverless}} project features [es-serverless-project-features]

The only add-on available for {{es}} projects is Serverless Plus. To opt in during the promotional period, start using the features on the relevant project. For more information, refer to [Serverless Plus add-on](#serverless-plus).
There are no additional project features or add-ons for {{es-serverless}} projects.

### {{sec-serverless}} project features [elastic-sec-project-features]

Expand All @@ -78,8 +73,8 @@ For {{sec-serverless}} projects, edit the **Project features** to select a featu
| Feature tier | Description and add-ons |
| :--- | :--- |
| **Elastic AI SOC Engine (EASE)** | A package of AI-powered tools meant to work with and enhance your existing SOC platforms: triage and correlate alerts from any platform using Attack Discovery, get realtime recommendations and assistance from AI Assistant, and share insights with your other tools. |
| **Security Analytics Essentials** | A suite of security analytics, detections, investigations, and collaboration tools. Does not include AI-powered tools. Allows these add-ons:<br>• **Endpoint Protection Essentials**: endpoint protections with {{elastic-defend}}.<br>• **Cloud Protection Essentials**: Cloud native security features.<br> |
| **Security Analytics Complete** | Everything in **Security Analytics Essentials** and **EASE**, plus advanced features such as entity analytics, threat intelligence, and more. Allows these add-ons:<br><br>• **Endpoint Protection Complete**: Everything in **Endpoint Protection Essentials** plus advanced endpoint detection and response features.<br>• **Cloud Protection Complete**: Everything in **Cloud Protection Essentials** plus advanced cloud security features.<br><br>The [Serverless Plus add-on](#serverless-plus) is included with this tier at no additional charge. |
| **Security Analytics Essentials** | A suite of security analytics, detections, investigations, and collaboration tools. Does not include AI-powered tools. Allows these add-ons:<br>• **Endpoint Protection Essentials**: endpoint protections with {{elastic-defend}}.<br>• **Cloud Protection Essentials**: Cloud native security features.|
| **Security Analytics Complete** | Everything in **Security Analytics Essentials** and **EASE**, plus advanced features such as entity analytics, threat intelligence, and more. Allows these add-ons:<br><br>• **Endpoint Protection Complete**: Everything in **Endpoint Protection Essentials** plus advanced endpoint detection and response features.<br>• **Cloud Protection Complete**: Everything in **Cloud Protection Essentials** plus advanced cloud security features.|

#### Downgrading the feature tier [elasticsearch-manage-project-downgrading-the-feature-tier]

Expand Down Expand Up @@ -122,22 +117,12 @@ For {{obs-serverless}} projects, edit the **Project features** to select a featu
| Feature tier | Description|
| :--- | :--- |
| **Observability Logs Essentials** | Includes everything you need to store and analyze logs at scale.<br> |
| **Observability Complete** | Adds full-stack observability capabilities to monitor cloud-native and hybrid environments.<br><br>The [Serverless Plus add-on](#serverless-plus) is included with this tier at no additional charge. |
| **Observability Complete** | Adds full-stack observability capabilities to monitor cloud-native and hybrid environments.|

:::{tip}
For a full feature comparison, upgrading instructions, and more, refer to [{{obs-serverless}} feature tiers](../../../solutions/observability/observability-serverless-feature-tiers.md).
:::

### Serverless Plus add-on [serverless-plus]

:::{include} ../_snippets/serverless-plus.md
:::

#### Availability [serverless-plus-add-on-availability]

:::{include} ../_snippets/serverless-plus-availability.md
:::

## Project tags

Project tags are metadata key-value pairs that help you to categorize and organize your projects.
Expand Down
2 changes: 2 additions & 0 deletions deploy-manage/security/_snippets/network-sec-tier-reqs.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
* For Observability projects, requires the [Observability Complete](/solutions/observability/observability-serverless-feature-tiers.md) feature tier.
* For Security projects, requires the [Security Analytics Complete](/solutions/security/security-serverless-feature-tiers.md) feature tier.
13 changes: 7 additions & 6 deletions deploy-manage/security/ip-filtering-cloud.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,13 +37,16 @@ To learn how to create IP filters for self-managed clusters or {{eck}} deploymen
:::

## Requirements
```{applies_to}
serverless:
```
The following requirements apply to the project where you want to apply an IP filter policy:

Serverless projects require the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) to apply IP filter policies. During the promotional period, applying an IP filter policy to a project opts that project in to Serverless Plus.

:::{tip}
You can opt out by disconnecting all policies from the project.
:::{include} _snippets/network-sec-tier-reqs.md
:::

There are no specific requirements for {{es-serverless}} projects or {{ech}} deployments.

## Limitations
```{applies_to}
deployment:
Expand Down Expand Up @@ -78,8 +81,6 @@ To create an IP filter:

You can associate an IP filter with your deployment or project from the IP filter's settings, or from your deployment or project's settings. After you associate the IP filter with a deployment or project, it starts filtering traffic.

Serverless projects require the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) to apply IP filters. During the promotional period, applying an IP filter to a project opts that project in to Serverless Plus.

:::{tip}
You can apply multiple policies to a single deployment or project. For {{ech}} deployments and {{serverless-short}} projects, you can apply both IP filter policies and private connection policies. In case of multiple policies, traffic can match any associated policy to be forwarded to the resource. If none of the policies match, the request is rejected with `403 Forbidden`.

Expand Down
5 changes: 4 additions & 1 deletion deploy-manage/security/ip-filtering.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,10 @@ In {{serverless-full}} and {{ech}}, IP filters are a type of [network security p
To learn how multiple IP filters are processed, and how IP filters and [private connections](/deploy-manage/security/private-connectivity.md) work together in ECH, refer to [](/deploy-manage/security/network-security-policies.md).

:::{note}
Serverless projects require the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) to apply IP filter policies. During the promotional period, applying an IP filter policy to a project opts that project in to Serverless Plus.
{{serverless-short}} Observability and Security projects must belong to a specific feature tier to apply IP filter policies:

* Observability: [Observability Complete](/solutions/observability/observability-serverless-feature-tiers.md)
* Security: [Security Analytics Complete](/solutions/security/security-serverless-feature-tiers.md)
:::

## ECE
Expand Down
14 changes: 12 additions & 2 deletions deploy-manage/security/network-security-api.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@ products:
- id: cloud-enterprise
- id: cloud-serverless
navigation_title: Through the API
sub:
policy-type: "network security"
---

# Manage network security through the API
Expand Down Expand Up @@ -45,10 +47,18 @@ Refer to [](network-security.md) to learn more about network security across all
Policies in {{ecloud}} are the equivalent of rule sets in {{ece}} and the {{ecloud}} API.
:::

:::{note}
Serverless projects require the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) to apply network security policies. During the promotional period, applying a network security policy to a project opts that project in to Serverless Plus.
## Requirements
```{applies_to}
serverless:
```

The following requirements apply to the project where you want to apply a network security policy:

:::{include} _snippets/network-sec-tier-reqs.md
:::

There are no specific requirements for {{es-serverless}} projects, {{ech}} deployments, or {{ece}} deployments.

## API reference

To learn more about these endpoints, refer to the reference for your deployment type:
Expand Down
16 changes: 7 additions & 9 deletions deploy-manage/security/private-connectivity-aws.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,13 +32,17 @@ To learn how private connection policies impact your deployment or project, refe
:::

## Requirements
```{applies_to}
serverless:
```

Serverless projects require the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) to apply private connection policies. During the promotional period, applying a private connection policy to a project opts that project in to Serverless Plus.
The following requirements apply to the project where you want to apply a private connection policy:

:::{tip}
You can opt out by disconnecting all policies from the project.
:::{include} _snippets/network-sec-tier-reqs.md
:::

There are no specific requirements for {{es-serverless}} projects or {{ech}} deployments.

## Considerations

Before you decide to set up private connectivity with AWS PrivateLink, review the following considerations:
Expand Down Expand Up @@ -349,10 +353,6 @@ Create a new private connection policy.
:::

8. Optional: Under **Apply to resources**, associate the new private connection policy with one or more deployments or projects. If you specified a VPC filter, then after you associate the filter with a resource, it starts filtering traffic.

:::{note}
Serverless projects require the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) to apply private connection policies. During the promotional period, applying a private connection policy to a project opts that project in to Serverless Plus.
:::
9. To automatically attach this private connection policy to new resources of this type, select **Apply by default**.
10. Click **Create**.
11. (Optional) If you created a private connection policy for {{ech}} deployments, you can [claim your VPC endpoint ID](/deploy-manage/security/claim-private-connection-api.md), so that no other organization is able to use it in a private connection policy.
Expand All @@ -363,8 +363,6 @@ The next step is to [associate the policy](#associate-private-connection-policy)

You can associate a private connection policy with your deployment or project from the policy's settings, or from your deployment's or project's settings.

Serverless projects require the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) to apply private connection policies. During the promotional period, applying a private connection policy to a project opts that project in to Serverless Plus.

#### From a deployment or project

:::::{applies-switch}
Expand Down
7 changes: 6 additions & 1 deletion deploy-manage/security/private-connectivity.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,12 @@ products:

Private connectivity is a secure way for your {{ecloud}} deployments and projects to communicate with other cloud provider services over your cloud provider's private network. You can create a virtual private connection (VPC) using your provider's private link service, and then manage it in {{ecloud}} using a private connection policy. You can also optionally filter traffic to your deployments and projects by creating ingress filters for your VPC in {{ecloud}}.

Serverless projects require the [Serverless Plus add-on](/deploy-manage/deploy/elastic-cloud/project-settings.md#serverless-plus) to apply private connection policies. During the promotional period, applying a private connection policy to a project opts that project in to Serverless Plus.
:::{note}
{{serverless-short}} Observability and Security projects must belong to a specific feature tier to apply private connection policies:

* Observability: [Observability Complete](/solutions/observability/observability-serverless-feature-tiers.md)
* Security: [Security Analytics Complete](/solutions/security/security-serverless-feature-tiers.md)
:::

:::{tip}
Private connection policies are a type of [network security policy](/deploy-manage/security/network-security-policies.md).
Expand Down
3 changes: 3 additions & 0 deletions redirects.yml
Original file line number Diff line number Diff line change
Expand Up @@ -843,6 +843,9 @@ redirects:
# Renamed for SEO - URL now matches page title
'solutions/security/detect-and-alert/requirements-privileges.md': 'solutions/security/detect-and-alert/turn-on-detections.md'

# No more elasticsearch solution add-ons
'solutions/elasticsearch-solution-project/es-serverless-add-ons.md': 'solutions/elasticsearch-solution-project.md'

# Fleet: removed "Hybrid Agent" product wording; remap section anchors on the same pages
'reference/fleet/elastic-agent-as-otel-collector.md':
anchors:
Expand Down

This file was deleted.

Loading
Loading