[Yandex Cloud documentation](../../index.md) > [Security in Yandex Cloud](../index.md) > Tutorials > All tutorials

# Yandex Cloud security tutorials

* [Obtaining the information you need to have a resource whitelisted by the Russian Ministry of Digital Development](info-for-federal-ip-whitelist.md)

## Authentication and access management {#authentication}

* [Access control for user groups with different roles in Yandex Identity Hub](authentication/user-group-access-control.md)
* [Using a service account with an OS Login profile for VM management via Ansible](authentication/sa-oslogin-ansible.md)
* Managing identity federations
    * [Authentication via Active Directory](authentication/integration-adfs.md)
    * [Google Workspace authentication](authentication/integration-gworkspace.md)
    * [Authentication via Microsoft Entra ID](authentication/integration-azure.md)
    * [Keycloak authentication](authentication/integration-keycloak.md)
    * User group mapping
        * [User group mapping in Microsoft Active Directory Federation Services](authentication/adfs.md)
        * [User group mapping in Microsoft Entra ID](authentication/entra-id.md)
        * [User group mapping in Keycloak](authentication/keycloak.md)

## SSO setup {#single-sign-on}

* [Creating an OIDC application in Yandex Identity Hub for integration with 1C:Enterprise](single-sign-on/oidc-1c-enterprise.md)
* Cloud.ru
    * [Creating a SAML app in Yandex Identity Hub for integration with Cloud.ru](single-sign-on/saml-cloud-ru.md)
    * [Creating an OIDC application in Yandex Identity Hub for integration with Cloud.ru](single-sign-on/oidc-cloud-ru.md)
* Grafana
    * [Creating a SAML application in Yandex Identity Hub for integration with Grafana Cloud](single-sign-on/saml-grafana.md)
    * [Creating an OIDC application in Yandex Identity Hub for integration with Grafana Cloud](single-sign-on/oidc-grafana.md)
    * [Creating an OIDC application in Yandex Identity Hub for integration with Grafana OSS](single-sign-on/oidc-grafana-oss.md)
* [Creating an OIDC application in Yandex Identity Hub for integration with Harbor](single-sign-on/oidc-harbor.md)
* Jenkins
    * [Creating a SAML app in Yandex Identity Hub for integration with Jenkins](single-sign-on/saml-jenkins.md)
    * [Creating an OIDC application in Yandex Identity Hub for integration with Jenkins](single-sign-on/oidc-jenkins.md)
* [Creating a SAML app in Yandex Identity Hub for integration with Managed Service for GitLab](single-sign-on/saml-managed-gitlab.md)
* [Creating a SAML app in Yandex Identity Hub for integration with Managed Service for OpenSearch](single-sign-on/saml-opensearch.md)
* [Creating an OIDC application in Yandex Identity Hub for integration with MWS](single-sign-on/oidc-mws.md)
* [Creating a SAML app in Yandex Identity Hub for integration with OpenSearch](single-sign-on/saml-opensearch-self-managed.md)
* OpenVPN
    * [Creating a SAML app in Yandex Identity Hub for integration with OpenVPN Access Server](single-sign-on/saml-ovpn.md)
    * [Configuring authentication in OpenVPN Community Edition via Yandex Identity Hub over the OIDC protocol](single-sign-on/oidc-ovpn.md)
* [Creating a SAML app in Yandex Identity Hub for integration with Selectel](single-sign-on/saml-selectel.md)
* [Creating a SAML app in Yandex Identity Hub for integration with Sentry](single-sign-on/saml-sentry.md)
* [Creating a SAML app in Yandex Identity Hub for integration with SonarQube](single-sign-on/saml-sonarqube.md)
* VK Cloud
    * [Creating a SAML app in Yandex Identity Hub for integration with VK Cloud](single-sign-on/saml-vk-cloud.md)
* [Creating a SAML app in Yandex Identity Hub for integration with Zabbix](single-sign-on/saml-zabbix.md)
* [Creating a SAML app in Yandex Identity Hub for integration with Passwork](single-sign-on/saml-passwork.md)
* [Creating a SAML app in Yandex Identity Hub for integration with Yandex 360](single-sign-on/saml-yandex-360.md)
* [Creating a SAML app in Yandex Identity Hub for integration with the management console of Yandex Browser for organizations](single-sign-on/saml-ya-browser-corporate.md)
* [Using an OIDC app and OAuth2 Proxy to set up single sign-on for applications that do not support SSO](single-sign-on/oidc-nginx-oauth2-proxy.md)


## Network security {#network-security}

* [Setting up virtual hosting](network-security/virtual-hosting.md)
* [Automatically copying objects from one Yandex Object Storage bucket to another](network-security/bucket-to-bucket-copying.md)
* [Loading data from Yandex Direct to a Yandex Managed Service for ClickHouse® data mart using Yandex Cloud Functions, Yandex Object Storage, and Yandex Data Transfer](network-security/data-transfer-direct-to-mch.md)
* [Creating a load balancer with DDoS protection](network-security/alb-with-ddos-protection/index.md)
* [Secure user access to cloud resources based on WireGuard VPN](network-security/remote-wireguard-vpn.md)
* [Providing secure access to content in Yandex Cloud CDN](network-security/protected-access-to-content/index.md)


## Secure virtual environment configuration {#virtualenv-safe-config}

* [Hosting a static Gatsby website in Yandex Object Storage](virtualenv-safe-config/gatsby-static-website.md)
* [Storing Apache Airflow™ connections and variables in Yandex Lockbox](virtualenv-safe-config/lockbox-and-airflow.md)
* [Deploying a fault-tolerant architecture with preemptible VMs](virtualenv-safe-config/nodejs-cron-restart-vm.md)
* Migrating services from NLB to L7 ALB for DDoS protection using Yandex Smart Web Security
    * [Migrating services from an NLB with VMs as targets to an L7 ALB](virtualenv-safe-config/nlb-with-target-resource-vm.md)
    * [Migrating services from an NLB with an instance group as a target to an L7 ALB](virtualenv-safe-config/nlb-with-target-resource-group-vm.md)
    * [Migrating services from an external NLB to an L7 ALB with an internal NLB as a target](virtualenv-safe-config/nlb-as-target-resource-alb.md)


## Data encryption and key management {#data-encryption-and-key-management}

* Data encryption
    * [Which encryption method should I choose?](data-encryption-and-key-management/choose-encryption-method.md)
    * [Encrypting data using the Yandex Cloud CLI and API](data-encryption-and-key-management/cli-api.md)
    * [Encrypting data using the Yandex Cloud SDK](data-encryption-and-key-management/sdk.md)
    * [Encrypting data using the AWS Encryption SDK](data-encryption-and-key-management/aws-encryption-sdk.md)
    * [Encrypting data using Google Tink](data-encryption-and-key-management/google-tink.md)
* [Managing Yandex Key Management Service keys with Hashicorp Terraform](data-encryption-and-key-management/terraform-key.md)
* [Encrypting secrets in Hashicorp Terraform](data-encryption-and-key-management/terraform-secret.md)
* [Auto Unseal in Hashicorp Vault](data-encryption-and-key-management/vault-secret.md)
* [Secure password transmission to an initialization script](data-encryption-and-key-management/secure-password-script/index.md)
* [Terminating TLS connections](data-encryption-and-key-management/tls-termination/index.md)
* [Secure storage of GitLab CI passwords as Yandex Lockbox secrets](data-encryption-and-key-management/gitlab-lockbox-integration.md)
* [Using a Yandex Lockbox secret to store a static access key](data-encryption-and-key-management/static-key-in-lockbox/index.md)
* [Getting Yandex Lockbox secret value on the GitHub side](data-encryption-and-key-management/wlif-github-integration.md)
* [Getting Yandex Lockbox secret value on the GitLab side](data-encryption-and-key-management/wlif-gitlab-integration.md)
* [Uploading objects into an Yandex Object Storage bucket using an ephemeral access key](data-encryption-and-key-management/ephemeral-key-storage.md)


## Collecting, monitoring, and analyzing audit logs {#audit-logs}

* [Searching for Yandex Cloud events in Yandex Query](audit-logs/query.md)
* [Searching for Yandex Cloud events in Yandex Object Storage](audit-logs/search-bucket.md)
* [Searching for Yandex Cloud events in Yandex Cloud Logging](audit-logs/search-cloud-logging.md)
* [Configuring dashboards and alerts in Yandex Monitoring](audit-logs/alerts-monitoring.md)
* [Configuring responses in Yandex Cloud Logging and Yandex Cloud Functions](audit-logs/logging-functions.md)
* [Processing Yandex Audit Trails events](audit-logs/audit-trails.md)
* Exporting audit logs to SIEM systems
    * [Exporting audit logs to MaxPatrol SIEM](audit-logs/maxpatrol/index.md)
    * [Uploading audit logs to Splunk SIEM](audit-logs/export-logs-to-splunk.md)
    * [Uploading audit logs to ArcSight SIEM](audit-logs/export-logs-to-arcsight.md)
    * [Uploading Yandex Audit Trails audit logs to KUMA SIEM](audit-logs/audit-trails-events-to-kuma/index.md)
* [Transferring logs from a VM to Yandex Cloud Logging](audit-logs/vm-fluent-bit-logging.md)
* [Writing load balancer logs to PostgreSQL](audit-logs/logging.md)
* [Transferring logs from Container Optimized Image to Yandex Cloud Logging](audit-logs/coi-fluent-bit-logging.md)


## Application security {#app-security}

* [Building a CI/CD pipeline in GitLab with serverless products](app-security/ci-cd-serverless.md)
* [Creating an interactive serverless application using WebSocket](app-security/websocket-app.md)
* [Creating an L7 load balancer in Yandex Application Load Balancer with a Yandex Smart Web Security profile](app-security/balancer-with-sws-profile/index.md)
* [Yandex API Gateway protection with Yandex Smart Web Security](app-security/api-gw-sws-integration.md)
* [Managing traffic sources](app-security/traffic-sources-management.md)
* [Adding an HTML page to work with Yandex SmartCaptcha](app-security/website.md)
* [Yandex SmartCaptcha in Android apps](app-security/quickstart-android.md)
* [Invisible Yandex SmartCaptcha in Android apps](app-security/invisible-captcha-android.md)
* [Yandex SmartCaptcha in an Android app on Flutter](app-security/quickstart-android-flutter.md)
* [Yandex SmartCaptcha on iOS](app-security/quickstart-ios.md)


## Kubernetes security {#kubernetes-security}

* [Encrypting secrets in Yandex Managed Service for Kubernetes](kubernetes-security/kms-k8s.md)
* [Signing and verifying Yandex Container Registry Docker images in Yandex Managed Service for Kubernetes](kubernetes-security/sign-cr-with-cosign.md)
* [Syncing with Yandex Managed Service for Kubernetes secrets](kubernetes-security/kubernetes-lockbox-secrets.md)
* [Getting the Yandex Lockbox secret value on the custom Kubernetes installation side](kubernetes-security/wlif-k8s-integration.md)
* [Accessing the Yandex Cloud API from a Managed Service for Kubernetes cluster using a workload identity federation in Identity and Access Management](kubernetes-security/wlif-managed-k8s-integration.md)
* [Creating an L7 load balancer with a Yandex Smart Web Security profile through an Yandex Application Load Balancer ingress controller](kubernetes-security/alb-ingress-with-sws-profile.md)
* [Migrating services from an NLB with a Yandex Managed Service for Kubernetes cluster as a target to an L7 ALB](kubernetes-security/nlb-with-target-resource-k8s/index.md)
* [Transferring Yandex Managed Service for Kubernetes cluster logs to Yandex Cloud Logging](kubernetes-security/k8s-fluent-bit-logging.md)