Secure Calico component communications
Secure Calico Cloud Prometheus endpoints
Restrict access to Calico Cloud Prometheus metric endpoints on a connected cluster with network policy so only authorized scrapers can read component telemetry.
Secure BGP sessions
Configure BGP session passwords on Calico Cloud BGP peers on a connected cluster to block attackers from injecting false routing information.