VA's in elastic search

Elastic Stack Elasticsearch
1

Hi All,

Hope all are doing well.

we are creating the users in elastic cluster with the rest api's of elastic, now We have received 3 VA's for the elasticsearch api's,

  1. Insecure HTTP methods enabled
  2. Missing Cache Controls in Header Configuration
  3. Security Misconfigurations-Security headers are missing

I tried to close these VA's within elastic without nginx or apache. but i can't.

please help me how can i close these VA's with in elasticsearch

Thanks in advance