Enterprise customers with applications requiring full PCI-DSS compliance can leverage the Instaclustr-managed Open Distro for Elasticsearch with full confidence
Instaclustr, delivering reliability at scale through its fully managed platform for open source data technologies, announced it has achieved PCI-DSS certification for its Managed Elasticsearch service running on AWS. Managed Elasticsearch is based on the Open Distro for Elasticsearch, which will soon be updated to OpenSearch. Using the open source distribution ensures that Instaclustr customers always have control and portability of their data, are not subject to vendor lock-in, and are free from licensing costs. Instaclustr’s Managed Apache Cassandra and Managed Apache Kafka solutions on AWS have also earned re-certification.
Recommended ITech News: Security Industry Association Applauds Senate Passage and Prioritization of U.S. Innovation and Competition Act
This PCI-DSS certification for Managed Elasticsearch adds to Instaclustr’s existing PCI-DSS and SOC 2 accreditations, which demonstrate the company’s commitment to thorough data security practices and architecture. Enterprise customers with the most stringent security requirements can utilize Instaclustr’s advanced managed open source data solutions knowing that their environment is continually aligned with the most rigorous security protocols.
The PCI-DSS (Payment Card Industry Data Security Standard) is the payment card industry’s mandated information security standard and applies to all organizations that store, process, and/or transmit cardholder data. PCI-DSS certification requirements dictate that all system components either within the cardholder data environment or with access to it must feature specific and strict technical, physical, and operational security controls. Beyond applications directly involving finance and payment card transactions, PCI-DSS controls are currently seeing increased adoption across other industries, as the recognized “gold standard” for security practices.
Recommended ITech News: Digital Realty Announces Availability of AWS Direct Connect 100G Dedicated Connections
“We remain proactive in ensuring the data technologies we deliver for enterprise customers are always held to the highest security standards,” said Ben Slater, Chief Product Officer, Instaclustr. “Instaclustr-managed Elasticsearch now joins our Cassandra and Kafka solutions in achieving PCI-DSS certification. Also, in addition to meeting PCI-DSS compliance for customers who require it, new security enhancements we’ve implemented will result in improved levels of security for all of our managed service customers, regardless of product or platform they are leveraging.”
With the re-certification of Managed Cassandra and Managed Kafka, the following enhancements have also been made:
- Private Network Clusters are now optional.
- Console SSO is supported.
- Requirements for cardholder data encryption have been revised to now only require encryption of the Primary Account Number (PAN). This is significant for Elasticsearch, as it allows additional flexibility for customers; for example, to search by customer name in Kibana.
Recommended ITech News: Sequans Communications Adopts Cadence RF Solution to Develop Next-Generation 5G IoT Platform
Additionally, when looking at Kibana specifically, Instaclustr supports connecting customers’ Instaclustr-provisioned Kibana instance to an Open Identity Connect (OIDC) SSO provider, which provides an enhanced user experience.
Customers requiring full PCI-DSS compliance can opt-in when creating an Elasticsearch cluster on the Instaclustr managed platform to enable the required security options (for example, password complexity in the Instaclustr console). There are additional customer responsibilities involved to achieve full compliance. For more detailed information, please see the Instaclustr support page.
Recommended ITech News: Nuvias Adds Deep Instinct to its Cybersecurity Vendor Portfolio
