anchor.diff:  
   You can configure the client to use {es}'s API Key for connecting to your 
   cluster. Note that you need the values of `id` and `api_key` to
  -[authenticate via an API Key](https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-create-api-key.html).
  +https://www.elastic.co/guide/en/elasticsearch/reference/current/security-api-create-api-key.html[authenticate via an API Key].
   
   [source,python]
   ----
  
positive.code: ->  HTTP CA certificate SHA-256 fingerprint:
    a52dd93511e8c6045e21f16654b77c9ee0f34aea26d9f40320b531c474676228
  ...
  \----------------------------------------------------------------------
  ----
  
  Note down the `elastic` user password and HTTP CA fingerprint for the next sections. In the examples below they will be stored in the variables `ELASTIC_PASSWORD` and `CERT_FINGERPRINT` respectively.
  
  Depending on the circumstances there are two options for verifying the HTTPS connection, either verifying with the CA certificate itself or via the HTTP CA certificate fingerprint.
  
  [discrete]
  ==== Verifying HTTPS with CA certificates
  
  Using the `ca_certs` option is the default way the Python Elasticsearch client verifies an HTTPS connection.
  
  The generated root CA certificate can be found in the `certs` directory in your Elasticsearch config location (`$ES_CONF_PATH/certs/http_ca.crt`). If you're running Elasticsearch in Docker there is https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html[additional documentation for retrieving the CA certificate].
  
  Once you have the `http_ca.crt` file somewhere accessible pass the path to the client via `ca_certs`:
  
  [source,python]
  ----
  
negative.code: )
  ----
  
  By default nodes are selected using round-robin, but alternate node selection 
  strategies can be configured with `node_selector_class` parameter.
  
  NOTE: If your {es} cluster is behind a load balancer like when using Elastic 
  Cloud you won't need to configure multiple nodes. Instead use the load balancer 
  host and port.
  
  
  [discrete]
  