AWS CDK Reference

Appearance

v2.275.0

KafkaClusterClientAuthenticationProperty Struct ​

Details of the client authentication used by the Apache Kafka cluster.

Source
Generated code
Type last changed
v2.268.0 · 2 Sep 2026

Example ​

ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_msk as msk } from 'aws-cdk-lib';
const kafkaClusterClientAuthenticationProperty: msk.CfnReplicator.KafkaClusterClientAuthenticationProperty = {
  mtls: {
    secretArn: 'secretArn',
  },
  saslOAuthBearer: {
    tokenEndpointAuthenticationMethod: 'tokenEndpointAuthenticationMethod',
    tokenEndpointUrl: 'tokenEndpointUrl',

    // the properties below are optional
    clientCredentials: {
      tokenRequestSecretArn: 'tokenRequestSecretArn',
    },
    clientCredentialsAssertion: {
      audience: 'audience',
      signingAlgorithm: 'signingAlgorithm',

      // the properties below are optional
      tokenRequestSecretArn: 'tokenRequestSecretArn',
    },
    iamJwtBearer: {
      audience: 'audience',
      signingAlgorithm: 'signingAlgorithm',

      // the properties below are optional
      tokenRequestSecretArn: 'tokenRequestSecretArn',
    },
    scope: 'scope',
    tokenEndpointTlsCertificateArn: 'tokenEndpointTlsCertificateArn',
  },
  saslScram: {
    mechanism: 'mechanism',
    secretArn: 'secretArn',
  },
};

Properties ​

mtlsoptionalIResolvable | CfnReplicator.KafkaClusterMtlsAuthenticationPropertymtlsoptionaltyping.Union[IResolvable, KafkaClusterMtlsAuthenticationProperty]mtlsoptionalIResolvableMtlsoptionalIResolvableMtlsoptionalinterface{}#
Details for mTLS client authentication.
saslOAuthBeareroptionalIResolvable | CfnReplicator.KafkaClusterSaslOAuthBearerAuthenticationPropertysasl_o_auth_beareroptionaltyping.Union[IResolvable, KafkaClusterSaslOAuthBearerAuthenticationProperty]saslOAuthBeareroptionalIResolvableSaslOAuthBeareroptionalIResolvableSaslOAuthBeareroptionalinterface{}#
Details for client authentication using SASL/OAUTHBEARER.
saslScramoptionalIResolvable | CfnReplicator.KafkaClusterSaslScramAuthenticationPropertysasl_scramoptionaltyping.Union[IResolvable, KafkaClusterSaslScramAuthenticationProperty]saslScramoptionalIResolvableSaslScramoptionalIResolvableSaslScramoptionalinterface{}#
Details for SASL/SCRAM client authentication.