Elasticsearch - Security
You want to create an API key that only allows reading from indices starting with "sales-" and no cluster privileges. Which role descriptor is correct in the request body?
You want to create an API key that only allows reading from indices starting with "sales-" and no cluster privileges. Which role descriptor is correct in the request body?
hard🚀 Application Q15 of Q15
Step-by-Step Solution
Solution:
Step 1: Identify required privileges
The API key should have no cluster privileges and only read privileges on indices starting with "sales-".Step 2: Match role descriptor to requirements
{ "role_descriptors": { "read_sales": { "cluster": [], "index": [{ "names": ["sales-*"], "privileges": ["read"] }] } } } has empty cluster privileges and read privilege on "sales-*" indices, matching the requirement.Final Answer:
{ "role_descriptors": { "read_sales": { "cluster": [], "index": [{ "names": ["sales-*"], "privileges": ["read"] }] } } } -> Option AQuick Check:
No cluster + read sales-* = { "role_descriptors": { "read_sales": { "cluster": [], "index": [{ "names": ["sales-*"], "privileges": ["read"] }] } } } [OK]
Quick Trick: Empty cluster array means no cluster privileges [OK]
Common Mistakes:
MISTAKES- Giving cluster all privileges by mistake
- Using write or all privileges instead of read
- Applying privileges to wrong index patterns
Master "Security" in Elasticsearch
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Elasticsearch Quizzes