Security guides
Written by
Updated at October 10, 2025
- Access control for user groups with different roles in Yandex Identity Hub
- Creating an L7 load balancer with DDoS protection
- Setting up basic protection in Smart Web Security
- Creating an L7 load balancer with a Smart Web Security security profile through an Application Load Balancer Ingress controller
- Migrating services from an NLB to an L7 ALB to enable Yandex Smart Web Security protection
- Terminating TLS connections
- Transferring logs from a VM instance to Yandex Cloud Logging
- Writing load balancer logs to PostgreSQL
- Secure storage of GitLab CI passwords as Yandex Lockbox secrets
- Using a Yandex Lockbox secret to store a static access key
- Using a service account with an OS Login profile for VM management via Ansible
- Providing secure access to content in Cloud CDN
- Uploading Yandex Audit Trails audit logs to KUMA SIEM
- Event search in audit logs
- Getting Yandex Lockbox secret value on the GitHub side
- Getting the Yandex Lockbox secret value on the GitLab side
- Getting the Yandex Lockbox secret value on the custom Kubernetes installation side
- Accessing the Yandex Cloud API from a Managed Service for Kubernetes cluster using a workload identity federation in Identity and Access Management
- Transferring logs from Container Optimized Image to Yandex Cloud Logging
- Transferring Yandex Managed Service for Kubernetes cluster logs to Yandex Cloud Logging
- Creating an L7 Yandex Application Load Balancer with a Yandex Smart Web Security profile
- Centralized online publication and protection against DDoS attacks of applications hosted in different Yandex Cloud folders
- Alert settings in Yandex Monitoring
- Exporting audit logs to MaxPatrol SIEM
- Uploading audit logs to Splunk SIEM
- Uploading audit logs to ArcSight SIEM
- Transferring Managed Service for Greenplum® cluster logs to Yandex Cloud Logging
Managing identity federations
- Authentication using Active Directory
- Authentication using Google Workspace
- Authentication using Microsoft Entra ID
- Authentication using Keycloak
User group mapping
- User group mapping in Microsoft Active Directory Federation Services
- User group mapping in Microsoft Entra ID
- User group mapping in Keycloak
Yandex SmartCaptcha use cases
- Adding an HTML page to work with Yandex SmartCaptcha
- Yandex SmartCaptcha in Android apps
- Invisible Yandex SmartCaptcha in Android apps
- Yandex SmartCaptcha in an Android app on Flutter
- Yandex SmartCaptcha in iOS apps
- Syncing Yandex Lockbox and Yandex Managed Service for Kubernetes secrets
- Encrypting secrets in Yandex Managed Service for Kubernetes
- Signing and verifying Yandex Container Registry Docker images in Yandex Managed Service for Kubernetes
- Managing Yandex Key Management Service keys with Hashicorp Terraform
- Encrypting secrets in Hashicorp Terraform
- Auto Unseal in Hashicorp Vault
Data encryption
- Which encryption method should I choose?
- Encrypting data using the Yandex Cloud CLI and API
- Encrypting data using the Yandex Cloud SDK
- Encrypting data using the AWS Encryption SDK
- Encrypting data using Google Tink
- Getting Yandex Lockbox secret value on the GitHub side
- Server-side encryption for an Object Storage bucket