Cloud Network Security

---
name: cloud-network-security
description: >
  Manage Serverless network security (traffic filters): create, update, and delete
  IP filters and AWS PrivateLink VPC filters. Use when restricting network access
  or configuring private connectivity.
compatibility: >
  Requires Python 3.8+, network access to the Elastic Cloud API (api.elastic-cloud.com).
  Environment variables: EC_API_KEY (required, set by cloud-setup), EC_BASE_URL (optional,
  defaults to https://api.elastic-cloud.com).
metadata:
  author: elastic
  version: 0.1.0
---

# Cloud Network Security

Manage network security policies for Elastic Cloud Serverless projects: IP filters to allowlist specific IPs or CIDRs,
and VPC filters (AWS PrivateLink) to restrict traffic to specific VPC endpoints.

> **Prerequisite:** This skill assumes the **cloud-setup** skill has already run — `EC_API_KEY` is set in the
> environment and the organization context is established. If `EC_API_KEY` is missing, instruct the agent to invoke
> **cloud-setup** first. Do NOT prompt the user for an API key directly.

For project creation and day-2 operations (including associating filters with projects), see **cloud-create-project**… install to load the full skill