Why security protects sensitive data in Elasticsearch

Introduction

Security helps keep important information safe from people who should not see it. It stops bad actions that can harm data or privacy.

When storing personal user information like names and emails

When handling payment or credit card details

When managing company secrets or confidential documents

When sharing data between systems over the internet

When controlling who can read or change data in Elasticsearch

Syntax

Elasticsearch

PUT /_security/role/my_role
{
  "cluster": ["all"],
  "indices": [
    {
      "names": ["my_index"],
      "privileges": ["read", "write"]
    }
  ]
}

This example shows how to create a role that controls access to data.

Roles define what users can do with data in Elasticsearch.

Examples

This creates a user named John with a password and assigns the role that controls data access.

Elasticsearch

PUT /_security/user/john
{
  "password" : "strongpassword",
  "roles" : ["my_role"]
}

This checks which user is currently logged in and their permissions.

Elasticsearch

GET /_security/_authenticate

Sample Program

This example creates a secure index, a role that can only read it, a user with that role, and then searches the index.

Elasticsearch

PUT /my_secure_index
{
  "settings": {
    "index": {
      "number_of_shards": 1
    }
  },
  "mappings": {
    "properties": {
      "secret_info": {"type": "text"}
    }
  }
}

PUT /_security/role/secure_reader
{
  "indices": [
    {
      "names": ["my_secure_index"],
      "privileges": ["read"]
    }
  ]
}

PUT /_security/user/alice
{
  "password": "alicepassword",
  "roles": ["secure_reader"]
}

GET /my_secure_index/_search
{
  "query": {"match_all": {}}
}

Important Notes

Always use strong passwords and limit user roles to only what they need.

Security settings help prevent unauthorized access and data leaks.

Summary

Security protects sensitive data by controlling who can see or change it.

Elasticsearch uses roles and users to manage data access.

Setting up security helps keep data safe and private.