A key that manages cloud resources is not necessarily a key that can search their data. For Elastic Cloud integrations, identify whether the operation targets the Cloud management API, Elasticsearch, or Kibana before choosing credentials.
Elastic's API-key documentation distinguishes these capabilities; Hosted and Serverless also have different access considerations. Check the scope for your deployment type rather than treating every Elastic endpoint as one authority.
Test the smallest read operation against the intended endpoint first. Do not expand a key's permissions merely because a credential for the wrong API was rejected.
Akousa