elastic avatar

Cloud Access Management

This handles the full IAM workflow for Elastic Cloud Serverless: invite users, assign predefined or custom roles to projects, and create scoped API keys with optional Elasticsearch access. It assumes cloud-setup has already run and set EC_API_KEY in the environment. The Python script auto-discovers your org ID and enforces that only organization owners can manage API keys. For custom roles with fine-grained index or Kibana privileges, you'll need manage_security on the project itself. The documentation is thorough, covering both happy paths and the manual .env fallback when cloud-setup isn't available. Pairs with cloud-create-project for new projects and elasticsearch-authz for deeper role mapping work inside Elasticsearch.

GitHub stars
503
last updated
Jun 1, 2026

Install

$ npx -y skills add elastic/agent-skills --skill cloud-access-management --agent claude-code

Installs into .claude/skills of the current project.

Files

This handles the full IAM workflow for Elastic Cloud Serverless: invite users, assign predefined or custom roles to projects, and create scoped API keys with optional Elasticsearch access. It assumes cloud-setup has already run and set EC_API_KEY in the environment. The Python script auto-discovers your org ID and enforces that only organization owners can manage API keys. For custom roles with fine-grained index or Kibana privileges, you'll need manage_security on the project itself. The documentation is thorough, covering both happy paths and the manual .env fallback when cloud-setup isn't available. Pairs with cloud-create-project for new projects and elasticsearch-authz for deeper role mapping work inside Elasticsearch.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/elastic/agent-skills
Categories
AI & Agent Building, Cloud & Infrastructure
License
Apache-2.0
First seen
Jun 11, 2026

More from elastic/agent-skills

All 57
1elastic avatarsecurity-alert-triageelastic/agent-skills>0skills.sh installs
2elastic avatarsecurity-case-managementelastic/agent-skills>0skills.sh installs
3elastic avatarsecurity-detection-rule-managementelastic/agent-skills>0skills.sh installs
4elastic avatarobservability-edot-dotnet-instrumentelastic/agent-skills>0skills.sh installs
5elastic avatarobservability-edot-dotnet-migrateelastic/agent-skills>0skills.sh installs
6elastic avatarobservability-edot-java-instrumentelastic/agent-skills>0skills.sh installs