Remote clusters strong identity verification configuration on ECH

[eedugon]

Summary

This PR adds the instructions to configure strong identity verification on ECH.

To accomplish this:

• I've moved the feature description that was documented in self-managed docs to the generic security-models.md doc and converted to a snippet.

• The feature is presented for stack: 9.3.

• We have created a new doc for this configuration, following a similar structure and pattern than the self-managed document. This new doc (similarly to the self-managed doc) provides the specific steps for strong identity verification, which need to be followed in addition to the remote cluster feature configuration with API keys authentication.

• In the ECH docs about remote clusters we are linking to this procedure for strong identity verification configuration.

Closes https://github.com/elastic/docs-content-internal/issues/610

Generative AI disclosure

1. Did you use a generative AI (GenAI) tool to assist in creating this contribution?

• Yes
• No

Tool(s) and model(s) used: Cursor in Auto mode.

[github-actions]

Vale Linting Results

Summary: 2 suggestions found

💡 Suggestions (2)

File	Line	Rule	Message
deploy-manage/remote-clusters/ec-remote-cluster-other-ess.md	40	Elastic.Wordiness	Consider using 'also' instead of 'in addition'.
deploy-manage/remote-clusters/ec-remote-cluster-same-ess.md	40	Elastic.Wordiness	Consider using 'also' instead of 'in addition'.

---

The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

[github-actions]

🔍 Preview links for changed docs

• deploy-manage/remote-clusters/ec-remote-cluster-strong-identity.md
• deploy-manage/remote-clusters.md
• deploy-manage/remote-clusters/ec-remote-cluster-other-ess.md
• deploy-manage/remote-clusters/ec-remote-cluster-same-ess.md
• deploy-manage/remote-clusters/remote-clusters-api-key.md
• deploy-manage/remote-clusters/security-models.md

[shainaraskas]

this looks good. I think we need more visibility of the "self-managed" process but I'll let you decide how far down that rabbit hole to go. at minimum, we need xlinks from all of the tutorials.

[shainaraskas]

we need to introduce the new strong identity verification page in the ECH overview: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4895/deploy-manage/remote-clusters/ec-enable-ccs

[eedugon]

we need to introduce the new strong identity verification page in the ECH overview: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4895/deploy-manage/remote-clusters/ec-enable-ccs

How? That page doesn't mention anything about security models.

Do you want to add more sections on that page? Introducing this new feature in that document would only make sense if we describe the security models, but we aren't (ECK page does btw, but ECE or ECH landing pages don't).

For the moment I've done what you request but in the landing page of remote clusters (remote-clusters.md). Let me know your thoughts :)

[shainaraskas]

How? That page doesn't mention anything about security models.

Do you want to add more sections on that page? Introducing this new feature in that document would only make sense if we describe the security models, but we aren't (ECK page does btw, but ECE or ECH landing pages don't).

For the moment I've done what you request but in the landing page of remote clusters (remote-clusters.md). Let me know your thoughts :)

I was thinking of this because I prefer to see a parent page introduce all of its children ... but you're right that the use case is hard to understand without contextualization. We could consider this page to be a supplementary helper page to tutorials, and in this way only make sense to be linked from tutorials. ignore this ask :)

[shainaraskas]

lgtm. I think you can edit the snippet to hint at strong identity verification. otherwise just little comments you can take or leave

[bytebilly]

LGTM 👍

[bytebilly]

Hey @eedugon, is there anything missing for this PR to be merged? Customers are asking about it and I'd like to see the docs live as soon as possible.

Thanks!

[eedugon]

thanks for the comment @bytebilly , merging it as we speak! Nothing was waiting, and in case of needing any extra small change or refinement we could do it in another PR.

Content will be published in the next build.

[bytebilly]

Thanks!