diff --git a/x-pack/plugins/stack_connectors/server/routes/get_inference_services.ts b/x-pack/plugins/stack_connectors/server/routes/get_inference_services.ts
index 005b565dff0d5..3c4a1b3aa1a35 100644
--- a/x-pack/plugins/stack_connectors/server/routes/get_inference_services.ts
+++ b/x-pack/plugins/stack_connectors/server/routes/get_inference_services.ts
@@ -20,6 +20,13 @@ export const getInferenceServicesRoute = (router: IRouter) => {
   router.get(
     {
       path: `${INTERNAL_BASE_STACK_CONNECTORS_API_PATH}/_inference/_services`,
+      security: {
+        authz: {
+          enabled: false,
+          reason:
+            'This route is opted out of authorization as it relies on ES authorization instead.',
+        },
+      },
       options: {
         access: 'internal',
       },
diff --git a/x-pack/plugins/stack_connectors/server/routes/get_well_known_email_service.ts b/x-pack/plugins/stack_connectors/server/routes/get_well_known_email_service.ts
index 5e15ca4c32838..2a0d02cb860a8 100644
--- a/x-pack/plugins/stack_connectors/server/routes/get_well_known_email_service.ts
+++ b/x-pack/plugins/stack_connectors/server/routes/get_well_known_email_service.ts
@@ -26,6 +26,13 @@ export const getWellKnownEmailServiceRoute = (router: IRouter) => {
   router.get(
     {
       path: `${INTERNAL_BASE_STACK_CONNECTORS_API_PATH}/_email_config/{service}`,
+      security: {
+        authz: {
+          enabled: false,
+          reason:
+            'This route is opted out from authorization as returning SMTP connection details does not require any.',
+        },
+      },
       validate: {
         params: paramSchema,
       },
diff --git a/x-pack/plugins/stack_connectors/server/routes/valid_slack_api_channels.ts b/x-pack/plugins/stack_connectors/server/routes/valid_slack_api_channels.ts
index 420af8d104891..ed58456d1929f 100644
--- a/x-pack/plugins/stack_connectors/server/routes/valid_slack_api_channels.ts
+++ b/x-pack/plugins/stack_connectors/server/routes/valid_slack_api_channels.ts
@@ -34,6 +34,13 @@ export const validSlackApiChannelsRoute = (
   router.post(
     {
       path: `${INTERNAL_BASE_STACK_CONNECTORS_API_PATH}/_slack_api/channels/_valid`,
+      security: {
+        authz: {
+          enabled: false,
+          reason:
+            "This route is opted out from authorization as it relies on Slack's own authorization.",
+        },
+      },
       validate: {
         body: bodySchema,
       },
diff --git a/x-pack/plugins/triggers_actions_ui/server/routes/config.ts b/x-pack/plugins/triggers_actions_ui/server/routes/config.ts
index 2e10586b76924..644d6bf01f63a 100644
--- a/x-pack/plugins/triggers_actions_ui/server/routes/config.ts
+++ b/x-pack/plugins/triggers_actions_ui/server/routes/config.ts
@@ -38,6 +38,13 @@ export function createConfigRoute({
   router.get(
     {
       path,
+      security: {
+        authz: {
+          enabled: false,
+          reason:
+            'This route is opted out from authorization as it uses the alerting client authorization.',
+        },
+      },
       validate: false,
       options: {
         access: 'internal',
diff --git a/x-pack/plugins/triggers_actions_ui/server/routes/health.ts b/x-pack/plugins/triggers_actions_ui/server/routes/health.ts
index b57e9b3df4dc6..c9f54b617eff5 100644
--- a/x-pack/plugins/triggers_actions_ui/server/routes/health.ts
+++ b/x-pack/plugins/triggers_actions_ui/server/routes/health.ts
@@ -25,6 +25,13 @@ export function createHealthRoute(
   router.get(
     {
       path,
+      security: {
+        authz: {
+          enabled: false,
+          reason:
+            'This route is opted out from authorization as the health route does not require any.',
+        },
+      },
       validate: false,
       options: {
         access: 'internal',