tamper protection

Author: natasha-moore-elastic

raw-migrated-files/docs-content/serverless/security-agent-tamper-protection.md

@@ -219,7 +219,6 @@ toc:
       - file: docs-content/serverless/project-settings-content.md
       - file: docs-content/serverless/security-about-rules.md
       - file: docs-content/serverless/security-advanced-settings.md
-      - file: docs-content/serverless/security-agent-tamper-protection.md
       - file: docs-content/serverless/security-ai-assistant-esql-queries.md
       - file: docs-content/serverless/security-ai-assistant.md
       - file: docs-content/serverless/security-ai-for-security.md

raw-migrated-files/toc.yml

@@ -4,29 +4,19 @@ mapped_urls:
   - https://www.elastic.co/guide/en/serverless/current/security-agent-tamper-protection.html
 ---
 
-# Prevent Elastic Agent uninstallation
+# Prevent {{agent}} uninstallation
 
-% What needs to be done: Align serverless/stateful
-
-% Use migrated content from existing pages that map to this page:
-
-% - [x] ./raw-migrated-files/security-docs/security/agent-tamper-protection.md
-% - [ ] ./raw-migrated-files/docs-content/serverless/security-agent-tamper-protection.md
-
-% Internal links rely on the following IDs being on this page (e.g. as a heading ID, paragraph ID, etc):
-
-$$$fleet-uninstall-tokens$$$
 
 For hosts enrolled in {{elastic-defend}}, you can prevent unauthorized attempts to uninstall {{agent}} and {{elastic-endpoint}} by enabling **Agent tamper protection** on the Agent policy. This offers an additional layer of security by preventing users from bypassing or disabling {{elastic-defend}}'s endpoint protections.
 
 When enabled, {{agent}} and {{elastic-endpoint}} can only be uninstalled on the host by including an uninstall token in the uninstall CLI command. One unique uninstall token is generated per Agent policy, and you can retrieve uninstall tokens in an Agent policy’s settings or in the {{fleet}} UI.
 
 ::::{admonition} Requirements
-* Agent tamper protection requires a [Platinum or higher subscription](https://www.elastic.co/pricing).
+* In {{stack}}, agent tamper protection requires a [Platinum or higher subscription](https://www.elastic.co/pricing).
+* In {{serverless-short}}, agent tamper protection requires the Endpoint Protection Complete [project feature](/deploy-manage/deploy/elastic-cloud/project-settings.md).
 * Hosts must be enrolled in the {{elastic-defend}} integration.
 * {{agent}}s must be version 8.11.0 or later.
 * This feature is supported for all operating systems.
-
 ::::
 
 
@@ -58,15 +48,15 @@ You can enable Agent tamper protection by configuring the {{agent}} policy.
 
 If you need the uninstall token to remove {{agent}} from an endpoint, you can find it in several ways:
 
-* **On the Agent policy** — Go to the Agent policy’s **Settings** tab, then click the **Get uninstall command** link. The **Uninstall agent** flyout opens, containing the full uninstall command with the token.
-* **On the {{fleet}} page** — Select **Uninstall tokens** for a list of the uninstall tokens generated for your Agent policies. You can:
+* **On the Agent policy**: Go to the Agent policy’s **Settings** tab, then click the **Get uninstall command** link. The **Uninstall agent** flyout opens, containing the full uninstall command with the token.
+* **On the {{fleet}} page**: Select **Uninstall tokens** for a list of the uninstall tokens generated for your Agent policies. You can:
 
     * Click the **Show token** icon in the **Token** column to reveal a specific token.
     * Click the **View uninstall command** icon in the **Actions** column to open the **Uninstall agent** flyout, containing the full uninstall command with the token.
 
 
 ::::{tip}
-If you have many tamper-protected {{agent}} policies, you may want to [Provide multiple uninstall tokens](/solutions/security/configure-elastic-defend/uninstall-elastic-agent.md#multiple-uninstall-tokens) in a single command.
+If you have many tamper-protected {{agent}} policies, you may want to [provide multiple uninstall tokens](/solutions/security/configure-elastic-defend/uninstall-elastic-agent.md#multiple-uninstall-tokens) in a single command.
 ::::