Network sec: rebrand and new cloud UX, IP filters in serverless

[shainaraskas]

This PR updates the core pages related to traffic filtering to reflect the new ux (issue: https://github.com/elastic/platform-docs-team/issues/682)

This is PR 1 of 2 or 3. The first PR will capture the core changes needed to ship the feature. Subsequent PRs will update references to traffic filters other places in the docs, do any necessary API reference cleanup, etc.

NOTE:
We currently don't have redirects working, so I can't update URLs right now. I can come back and update these URLs if needed after we get redirects up and running.

Summary

• rebranded traffic filters feature area to network security
• added IP filter support for serverless
• rebranded privatelink filters as private connectivity / private connections
• rebranded rules to policies
• rebranded remote cluster traffic filters to remote cluster private connection policies
• repositioned private connection policies to disconnect allowing traffic over PrivateLink from filtering traffic to deployments to specific VPCEs
• split elastic cloud policy logic into its own page
• split ECE traffic filter instructions and logic into its own page
• updated all procedures impacted by ux changes
• moved an API-centric page that applied to both IP filters and private connections higher in the nav for visibility + added serverless API procedures

This PR is pretty big, so you can use the links below to review it

Key changes

Network security and network security policies

Page (preview link)	Changes	Related files
Network security	Rebranded the "umbrella" of features as network security, added IP filter support for serverless, rebranded PrivateLink filters as private connections Pulled policy/rule logic out of this page and into dedicated pages for Elastic Cloud and ECE	deploy-manage/security/traffic-filtering.md
Network security policies in Elastic Cloud	NEW PAGE split from the ECE version. Rebrand, slight reorganization for readability, changed flows impacted by UX changes, added serverless flows	deploy-manage/security/network-security-policies.md
Manage network security through the API	Rebrand for changed terms (provided a mapping due to unchanged endpoints), brought up a level so it would apply to both IP filters and private connections, added serverless examples based on the API design	deploy-manage/security/ec-traffic-filtering-through-the-api.md

IP filters

Page (preview link)	Changes	Related files
IP filtering	Scoped to serverless, linked to new split docs for Elastic Cloud / ECE, some organizational headings to support	deploy-manage/security/ip-traffic-filtering.md
Manage IP filters in ECH or Serverless	Scoped to ECH and serverless, removed ECE info to another doc Rebranded as "IP filter network security policies" Updated all flows impacted by UX changes	deploy-manage/security/ip-filtering-cloud.md snippet: wayfinding to network security page

Private connections

Page (preview link)	Changes	Related files
Private connections (overview)	Rebranded private link filters to private connections repositioned them as a connectivity strategy with VCPE filtering optional for everything but Azure	deploy-manage/security/private-link-traffic-filters.md
AWS PrivateLink private connections	Updated with new UX flows, clarified connection between private connection + VPCE filtering, split processes repeated across CSPs into snippets, readability + flow improvements, fixed testing examples to account for the "allow traffic over private link by default" change used deployment aliases to test/connect privatelink for consistency	deploy-manage/security/aws-privatelink-traffic-filters.md snippets: wayfinding to network security page, associate filter, private url structure, find endpoint, fleet
Azure Private Link private connections	Updated with new UX flows, clarified connection between private connection + VPCE filtering, split processes repeated across CSPs into snippets, readability + flow improvements, fixed testing examples to account for the "allow traffic over private link by default" change used deployment aliases to test/connect privatelink for consistency	deploy-manage/security/azure-private-link-traffic-filters.md snippets: wayfinding to network security page, associate filter, private url structure, find endpoint, fleet
GCP Private Service Connect private connections	Updated with new UX flows, clarified connection between private connection + VPCE filtering, split processes repeated across CSPs into snippets, readability + flow improvements, fixed testing examples to account for the "allow traffic over private link by default" change used deployment aliases to test/connect privatelink for consistency	deploy-manage/security/gcp-private-service-connect-traffic-filters.md snippets: wayfinding to network security page, associate filter, private url structure, find endpoint, fleet

Remote clusters

Page (preview link)	Changes	Related files
Remote clusters with Elastic Cloud Hosted Access deployments of another Elastic Cloud organization	remote cluster traffic filters are now remote cluster private conenction policies	deploy-manage/remote-clusters/ec-enable-ccs.md deploy-manage/remote-clusters/ec-remote-cluster-other-ess.md

Secondary changes

todo: serverless reference doc URL

Page (preview link)	Changes	Related files
Deploy and manage > Security (overview)	Scoped to serverless (this is the first configurable security feature) Updated references to traffic filters to "network security" or "IP filtering and private connections" as needed, added IP filtering to the list of security features for serverless	deploy-manage/security.md deploy-manage/_snippets/ecloud-security.md snippets: security in elastic cloud, features for cluster communication and network security, feature comparison
Secure your cluster, deployment, or project	Scoped to serverless, updated references to traffic filters to "network security" or "IP filtering and private connections" as needed, added IP filtering to the list of security features for serverless	deploy-manage/security/secure-your-cluster-deployment.md snippets: features for cluster communication and network security, feature comparison
Compare Elastic Cloud Hosted and Serverless	Added public IP filtering as a serverless feature	deploy-manage/deploy/elastic-cloud/differences-from-other-elasticsearch-offerings.md
Manage IP filters in ECE	NEW PAGE split from the cloud (ECH/serverless) version. instructions remain the same, references to ECH/serverless removed	deploy-manage/security/ip-filtering-ece.md
Traffic filter rules in Elastic Cloud Enterprise	NEW PAGE split from the cloud (ECH/serverless) version. information and instructions remain the same, references to ECH/serverless removed. slight organizational improvements to break out logic info from restrictions	deploy-manage/security/ece-filter-rules.md
Claim VCPE ID ownership	Rebrand away from traffic filter link ID to VCPE ID	deploy-manage/security/claim-traffic-filter-link-id-ownership-through-api.md

Open questions

• Is the umbrella term for private connection filters "VCPE filtering" (e.g. "add a private connection, then filter traffic to your deployment using VCPE filters")? Will this term be used for GCP?
• For Azure, is associating a private connection policy with a deployment required, or optional?
• For Azure inter-region private links, what region should the associated policy be created in?

[github-actions]

🔍 Preview links for changed docs:

• deploy-manage/deploy/elastic-cloud/differences-from-other-elasticsearch-offerings.md
• deploy-manage/remote-clusters/ec-enable-ccs.md
• deploy-manage/remote-clusters/ec-remote-cluster-other-ess.md
• deploy-manage/security.md
• deploy-manage/security/aws-privatelink-traffic-filters.md
• deploy-manage/security/azure-private-link-traffic-filters.md
• deploy-manage/security/claim-traffic-filter-link-id-ownership-through-api.md
• deploy-manage/security/ec-traffic-filtering-through-the-api.md
• deploy-manage/security/ece-filter-rules.md
• deploy-manage/security/gcp-private-service-connect-traffic-filters.md
• deploy-manage/security/ip-filtering-cloud.md
• deploy-manage/security/ip-filtering-ece.md
• deploy-manage/security/ip-traffic-filtering.md
• deploy-manage/security/network-security-policies.md
• deploy-manage/security/private-link-traffic-filters.md
• deploy-manage/security/secure-your-cluster-deployment.md
• deploy-manage/security/traffic-filtering.md

🔔 The preview site may take up to 3 minutes to finish building. These links will become live once it completes.

[shainaraskas]

hey @alxchalkias, this is ready for review. Please loop in any devs who you'd like to review it as well. I left some open questions at the bottom of the PR description that you might be able to help me with.