AWS::MSK::Cluster Sasl - Amazon CloudFormation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

AWS::MSK::Cluster Sasl

Details for client authentication using SASL. To turn on SASL, you must also turn on EncryptionInTransit by setting inCluster to true. You must set clientBroker to either TLS or TLS_PLAINTEXT. If you choose TLS_PLAINTEXT, then you must also set unauthenticated to true.


To declare this entity in your Amazon CloudFormation template, use the following syntax:


{ "Iam" : Iam, "Scram" : Scram }


Iam: Iam Scram: Scram



Details for ClientAuthentication using IAM.

Required: No

Type: Iam

Update requires: No interruption


Details for SASL/SCRAM client authentication.

Required: No

Type: Scram

Update requires: No interruption