The actual product is pretty decent. They have sane defaults for security and unlike their open source product they enable security by default.
The management of it sucks. Management console is tied to a single email, theres no MFA, and the ui is only good for creating es instances. Anything production that stores data and open to public internet full stop must have MFA.
I'm not sure what elastic should have done here, but this is not the right move.
The actual product is pretty decent. They have sane defaults for security and unlike their open source product they enable security by default.
The management of it sucks. Management console is tied to a single email, theres no MFA, and the ui is only good for creating es instances. Anything production that stores data and open to public internet full stop must have MFA.
I'm not sure what elastic should have done here, but this is not the right move.