Skip to content

Conversation

kosabogi
Copy link
Contributor

@kosabogi kosabogi commented Mar 3, 2025

This PR adds details to the 'Access isolation for the found-snapshots repository' overview page.

Related issue: https://github.com/elastic/docs-projects/issues/447

@kosabogi kosabogi requested review from eedugon and shainaraskas March 3, 2025 11:56
Copy link
Contributor

@eedugon eedugon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some changes suggested:

  • Remove the note and make the content part of the introduction.
  • Change the initial sentence as the explained default was incorrect.


# Access isolation for the found-snapshots repository [ec-snapshot-repository-migration]

In {{ech}}, [snapshots](/deploy-manage/tools/snapshot-and-restore.md) are stored in a repository. By default, deployments in the same region may have access to each other’s snapshots through the `found-snapshots` repository.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to clarify what's the default, because this sentence is contradictory with the note, which was the only content of the original doc (https://www.elastic.co/guide/en/cloud/current/ec-snapshot-repository-migration.html).

I believe the default now is isolation. In such case the introductory sentence might cause confusion.

Comment on lines 9 to 12
In {{ech}}, [snapshots](/deploy-manage/tools/snapshot-and-restore.md) are stored in a repository. By default, deployments in the same region may have access to each other’s snapshots through the `found-snapshots` repository.

To enhance security, access isolation ensures that each deployment can only access its own snapshots. This prevents accidental or unauthorized access to backups from other deployments within the same organization.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
In {{ech}}, [snapshots](/deploy-manage/tools/snapshot-and-restore.md) are stored in a repository. By default, deployments in the same region may have access to each other’s snapshots through the `found-snapshots` repository.
To enhance security, access isolation ensures that each deployment can only access its own snapshots. This prevents accidental or unauthorized access to backups from other deployments within the same organization.
In {{ech}}, access isolation ensures that each deployment can only access its own snapshots, preventing accidental or unauthorized access to backups from other deployments within the same organization.
Any newly created deployment has snapshot isolation set up by default. These guides are only relevant for deployments created before this default was introduced, where deployments within your organization in the same region may have access to each other's snapshots.
If a deployment can access the snapshots of other deployments, a notification will appear in the deployments menu under Elasticsearch > Snapshots, prompting you to set up access isolation.

kosabogi and others added 2 commits March 3, 2025 14:38
Copy link
Contributor

@eedugon eedugon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great now!

@kosabogi kosabogi merged commit 507ba1d into main Mar 3, 2025
4 checks passed
@kosabogi kosabogi deleted the access-isolation-description branch March 3, 2025 17:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants