interface EncryptionInTransitConfig 🔹

Language	Type name
.NET	Amazon.CDK.AWS.MSK.EncryptionInTransitConfig
Java	software.amazon.awscdk.services.msk.EncryptionInTransitConfig
Python	aws_cdk.aws_msk.EncryptionInTransitConfig
TypeScript (source)	@aws-cdk/aws-msk » EncryptionInTransitConfig

The settings for encrypting data in transit.

See also: https://docs.aws.amazon.com/msk/latest/developerguide/msk-encryption.html#msk-encryption-in-transit

Example

declare const vpc: ec2.Vpc;
const cluster = new msk.Cluster(this, 'cluster', {
  clusterName: 'myCluster',
  kafkaVersion: msk.KafkaVersion.V2_8_1,
  vpc,
  encryptionInTransit: {
    clientBroker: msk.ClientBrokerEncryption.TLS,
  },
  clientAuthentication: msk.ClientAuthentication.sasl({
    scram: true,
  }),
});

Properties

Name	Type	Description
clientBroker?🔹	ClientBrokerEncryption	Indicates the encryption setting for data in transit between clients and brokers.
enableInCluster?🔹	boolean	Indicates that data communication among the broker nodes of the cluster is encrypted.

---

clientBroker?🔹

Type: ClientBrokerEncryption (optional, default: TLS)

Indicates the encryption setting for data in transit between clients and brokers.

---

enableInCluster?🔹

Type: boolean (optional, default: true)

Indicates that data communication among the broker nodes of the cluster is encrypted.