APM server can :
- Communicate with Elasticsearch using SSL/TLS
- SSL/TLS can be enabled in input combined with APIkey Authentification, so any agent need to send a token and use SSL/TLS to talk to APM server
What agent are you using ? I used many time java agent to talk with APM server in SSL