---
title: Set up cloud security
description: Set up Cloud Security Posture Management, Kubernetes Security Posture Management, Cloud Asset Discovery, and Cloud Native Vulnerability Management in Elastic Security.
url: https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/set-up/set-up-cloud-security
products:
  - Elastic Cloud Serverless
  - Elastic Documentation
  - Elastic Security
applies_to:
  - Serverless Security projects: Generally available
  - Elastic Stack: Generally available
---

# Set up cloud security
Elastic Security's cloud security features find risks in your cloud accounts and Kubernetes clusters. They check your configuration against security best practices, list your cloud assets, and scan your AWS EC2 Linux workloads for known vulnerabilities.
You set up each feature by adding its integration and connecting it to your cloud provider or cluster. After setup, each integration sends its results to Elastic Security, where you can review them in [Cloud Security](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud).

## How the cloud security features work

Each feature answers a different question about your cloud environment:
- **Cloud Security Posture Management (CSPM)**: Checks the services in your AWS, GCP, and Azure accounts, such as storage, compute, and identity and access management (IAM), against benchmarks from the Center for Internet Security (CIS).
- **Kubernetes Security Posture Management (KSPM)**: Checks the components of your Kubernetes clusters against CIS benchmarks.
- <applies-to>Elastic Cloud Serverless: Preview</applies-to> <applies-to>Elastic Stack: Preview since 9.1</applies-to> **Cloud Asset Discovery**: Builds an inventory of the resources in your AWS, GCP, and Azure accounts.
- **Cloud Native Vulnerability Management (CNVM)**: Scans your AWS EC2 Linux workloads for known vulnerabilities.


## Where to start


| Your goal                                                                                                                                                      | Start here                                                                                                                                                                                                                                                                                                                                                                                            |
|----------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Check your AWS, GCP, or Azure accounts for misconfigurations                                                                                                   | [CSPM for AWS](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/get-started-with-cspm-for-aws), [CSPM for GCP](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/get-started-with-cspm-for-gcp), or [CSPM for Azure](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/get-started-with-cspm-for-azure)       |
| Give users access to view or manage CSPM data                                                                                                                  | [CSPM privilege requirements](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/cspm-privilege-requirements)                                                                                                                                                                                                                                                             |
| Check your Kubernetes clusters for misconfigurations                                                                                                           | [Get started with KSPM](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/get-started-with-kspm)                                                                                                                                                                                                                                                                         |
| <applies-to>Elastic Cloud Serverless: Preview</applies-to> <applies-to>Elastic Stack: Preview since 9.1</applies-to> List the resources in your cloud accounts | [Cloud Asset Discovery for AWS](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/asset-disc-aws), [Cloud Asset Discovery for GCP](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/asset-disc-gcp), or [Cloud Asset Discovery for Azure](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/asset-disc-azure) |
| Scan your AWS EC2 Linux workloads for known vulnerabilities                                                                                                    | [Get started with CNVM](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/get-started-with-cnvm) → [CNVM privilege requirements](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/cnvm-privilege-requirements)                                                                                                                             |
| Turn on cloud security features in a Serverless project                                                                                                        | [Enable cloud security features in Serverless](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud/enable-cloud-security-features)                                                                                                                                                                                                                                         |


## Next steps

After you set up cloud security, you can:
- Review findings, benchmarks, and vulnerabilities in [Cloud Security](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/cloud).
- Monitor posture at a glance on the [Cloud Security Posture dashboard](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/dashboards/cloud-security-posture-dashboard).
- [Manage cloud workload protection](https://www.elastic.co/elastic/docs-builder/docs/4302/solutions/security/manage/manage-cloud-workload-protection) to detect and block threats on your Linux VMs and Kubernetes workloads at runtime.