@aws-cdk/aws-msk-alpha.SaslAuthProps

Experimental

@aws-cdk/aws-msk-alpha is an experimental (alpha) package: its API may change in any release, without a major version bump.

SaslAuthProps Struct

SASL authentication properties.

Stability

Experimental

Source

lib/cluster.ts

Example

declare const vpc: ec2.Vpc;
const cluster = new msk.Cluster(this, 'cluster', {
  clusterName: 'myCluster',
  kafkaVersion: msk.KafkaVersion.V4_1_X_KRAFT,
  vpc,
  encryptionInTransit: {
    clientBroker: msk.ClientBrokerEncryption.TLS,
  },
  clientAuthentication: msk.ClientAuthentication.sasl({
    scram: true,
  }),
});

Properties

iambooleaniambooliamBooleanIamboolIam*bool= false#

Enable IAM access control.

keyIKeyRefkeyIKeyRefkeyIKeyRefKeyIKeyRefKeyIKeyRef= CMK will be created with alias m…#

KMS Key to encrypt SASL/SCRAM secrets.

You must use a customer master key (CMK) when creating users in secrets manager. You cannot use a Secret with Amazon MSK that uses the default Secrets Manager encryption key.

default

Default: CMK will be created with alias msk/{clusterName}/sasl/scram

scrambooleanscramboolscramBooleanScramboolScram*bool= false#

Enable SASL/SCRAM authentication.