# What is the best Cloud architecture for AWS and can anyone delete an index **URL:** \ **Category:** Elasticsearch\ **Created:** [May 13, 2016, 10:43pm UTC](https://discuss.elastic.co/t/what-is-the-best-cloud-architecture-for-aws-and-can-anyone-delete-an-index/50039 "2016-05-13T22:43:11Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![kartikvelastic](https://avatars.discourse-cdn.com/v4/letter/k/7ba0ec/32.png) [@kartikvelastic](https://discuss.elastic.co/u/kartikvelastic)\ **Post date:** [May 13, 2016, 10:43pm UTC](https://discuss.elastic.co/t/what-is-the-best-cloud-architecture-for-aws-and-can-anyone-delete-an-index/50039/1 "2016-05-13T22:43:11Z")
Hi, I am thinking that the architecture which appears most secure is have web servers send httpd logs to a dual homed logstash server who sends them to ES data nodes on a private LAN. Please advise. Also, it seems to me that anyone able to ping my ES nodes ot establish an http connection can delete any idices via curl. There appears to be a flag to stop AL indices from being deleted, but someone could just as well delete them one by one. Am I missing something? Thanks team. ---
**Author:** ![shanec](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shanec/32/4004_2.png) [@shanec](https://discuss.elastic.co/u/shanec)\ **Post date:** [May 14, 2016, 2:14am UTC](https://discuss.elastic.co/t/what-is-the-best-cloud-architecture-for-aws-and-can-anyone-delete-an-index/50039/2 "2016-05-14T02:14:57Z")
If you're talking about Amazon Elasticsearch-as-a-Service, Elastic is not involved with it & we don't support it. We have our own [Cloud](https://www.elastic.co/cloud) offering, hosted on AWS, and which is secured via role based authentication from the start using our own official [Shield](https://www.elastic.co/products/shield). Shield is the best way to secure an Elasticsearch cluster if you're hosting on AWS yourself as well, as it secures all the way to the core of Elasticsearch and integrates with Kibana directly as well. ---
**Author:** ![kartikvelastic](https://avatars.discourse-cdn.com/v4/letter/k/7ba0ec/32.png) [@kartikvelastic](https://discuss.elastic.co/u/kartikvelastic)\ **Post date:** [May 14, 2016, 8:56pm UTC](https://discuss.elastic.co/t/what-is-the-best-cloud-architecture-for-aws-and-can-anyone-delete-an-index/50039/3 "2016-05-14T20:56:10Z")
I was not talking about Elasticsearch-as-a-service as offered by AWS, having said that, nor was I talking about Elasticsearch's Cloud offering hosted on AWS protected by Shield. One of the beauties of free software is that it is available at no charge. I was talking about securing the free offering by Elasticsearch with and/or without the cloud, could you please shed some light on that? ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [May 17, 2016, 7:20pm UTC](https://discuss.elastic.co/t/what-is-the-best-cloud-architecture-for-aws-and-can-anyone-delete-an-index/50039/4 "2016-05-17T19:20:21Z")
> Also, it seems to me that anyone able to ping my ES nodes ot establish an http connection can delete any idices via curl. There appears to be a flag to stop AL indices from being deleted, but someone could just as well delete them one by one. Am I missing something? Oh no, you're right. Exposing an ES instance to the world without requiring authentication or at least filtering the incoming requests is a really bad idea. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 10:50pm UTC](https://discuss.elastic.co/t/what-is-the-best-cloud-architecture-for-aws-and-can-anyone-delete-an-index/50039/5 "2017-07-05T22:50:51Z")