Yandex Cloud security tutorials
Written by
Updated at September 25, 2026
Authentication and access management
- Access control for user groups with different roles in Yandex Identity Hub
- Using a service account with an OS Login profile for VM management via Ansible
- Managing identity federations
SSO setup
- Creating an OIDC application in Yandex Identity Hub for integration with 1C:Enterprise
- Cloud.ru
- Grafana
- Creating an OIDC application in Yandex Identity Hub for integration with Harbor
- Jenkins
- LibreChat
- Loop
- Creating a SAML app in Yandex Identity Hub for integration with Managed Service for GitLab
- Creating a SAML app in Yandex Identity Hub for integration with Managed Service for OpenSearch
- Creating an OIDC application in Yandex Identity Hub for integration with MWS
- Creating a SAML app in Yandex Identity Hub for integration with OpenSearch
- OpenVPN
- Creating an OIDC application in Yandex Identity Hub for integration with Open WebUI
- Creating a SAML app in Yandex Identity Hub for integration with Selectel
- Creating a SAML app in Yandex Identity Hub for integration with Sentry
- Creating a SAML app in Yandex Identity Hub for integration with SonarQube
- Time
- Creating a SAML app in Yandex Identity Hub for integration with VK Cloud
- Creating a SAML app in Yandex Identity Hub for integration with Zabbix
- Creating a SAML app in Yandex Identity Hub for integration with Passwork
- Creating a SAML app in Yandex Identity Hub for integration with Yandex 360
- Creating a SAML app in Yandex Identity Hub for integration with the management console of Yandex Browser for organizations
- Using an OIDC app and OAuth2 Proxy to set up single sign-on for applications that do not support SSO
Network security
- Setting up virtual hosting
- Automatically copying objects from one Yandex Object Storage bucket to another
- Loading data from Yandex Direct to a Yandex Managed Service for ClickHouse® data mart using Yandex Cloud Functions, Yandex Object Storage, and Yandex Data Transfer
- Creating a load balancer with DDoS protection
- Secure user access to cloud resources based on WireGuard VPN
- Providing secure access to content in Yandex Cloud CDN
Secure virtual environment configuration
- Hosting a static Gatsby website in Yandex Object Storage
- Storing Apache Airflow™ connections and variables in Yandex Lockbox
- Deploying a fault-tolerant architecture with preemptible VMs
- Migrating services from NLB to L7 ALB for DDoS protection using Yandex Smart Web Security
Data encryption and key management
- Data encryption
- Managing Yandex Key Management Service keys with Hashicorp Terraform
- Encrypting secrets in Hashicorp Terraform
- Auto Unseal in Hashicorp Vault
- Securely providing a password to an initialization script
- Terminating TLS connections
- Secure storage of GitLab CI passwords as Yandex Lockbox secrets
- Using a Yandex Lockbox secret to store a static access key
- Getting Yandex Lockbox secret value on the GitHub side
- Getting Yandex Lockbox secret value on the GitLab side
- Uploading objects into an Yandex Object Storage bucket using an ephemeral access key
Collecting, monitoring, and analyzing audit logs
- Searching for Yandex Cloud events in Yandex Query
- Searching for Yandex Cloud events in Yandex Object Storage
- Searching for Yandex Cloud events in Yandex Cloud Logging
- Configuring dashboards and alerts in Yandex Monitoring
- Configuring responses in Yandex Cloud Logging and Yandex Cloud Functions
- Processing Yandex Audit Trails events
- Exporting audit logs to SIEM systems
- Transferring logs from a VM to Yandex Cloud Logging
- Writing load balancer logs to PostgreSQL
- Transferring logs from Container Optimized Image to Yandex Cloud Logging
Application security
- Building a CI/CD pipeline in GitLab with serverless products
- Creating an interactive serverless application using WebSocket
- Creating an L7 load balancer in Yandex Application Load Balancer with a Yandex Smart Web Security profile
- Yandex API Gateway protection with Yandex Smart Web Security
- Managing traffic sources
- Adding an HTML page to work with Yandex SmartCaptcha
- Yandex SmartCaptcha in Android apps
- Invisible Yandex SmartCaptcha in Android apps
- Yandex SmartCaptcha in an Android app on Flutter
- Yandex SmartCaptcha on iOS
Kubernetes security
- Encrypting secrets in Yandex Managed Service for Kubernetes
- Signing and verifying Yandex Container Registry Docker images in Yandex Managed Service for Kubernetes
- Syncing with Yandex Managed Service for Kubernetes secrets
- Getting the Yandex Lockbox secret value on the custom Kubernetes installation side
- Accessing the Yandex Cloud API from a Managed Service for Kubernetes cluster using a workload identity federation in Identity and Access Management
- Creating an L7 load balancer with a Yandex Smart Web Security profile through an Yandex Application Load Balancer ingress controller
- Migrating services from an NLB with a Yandex Managed Service for Kubernetes cluster as a target to an L7 ALB
- Transferring Yandex Managed Service for Kubernetes cluster logs to Yandex Cloud Logging