Elasticsearch API keys inherit an identity as well as a privilege list

<h1> Elasticsearch API keys inherit an identity as well as a privilege list </h1> <p>An Elasticsearch API key is more than a bearer credential with index names attached. It represents a principal and a set of role descriptors, and its effective authority depends on the user who created or granted it. That makes key lifecycle, owner auditing, and document-level restrictions part of the same authori

Read the source →