# KafkaClusterClientAuthenticationProperty

Details of the client authentication used by the Apache Kafka cluster.

- Source: Generated code
- Type last changed: v2.268.0 · 2 Sep 2026

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_msk as msk } from 'aws-cdk-lib';
const kafkaClusterClientAuthenticationProperty: msk.CfnReplicator.KafkaClusterClientAuthenticationProperty = {
  mtls: {
    secretArn: 'secretArn',
  },
  saslOAuthBearer: {
    tokenEndpointAuthenticationMethod: 'tokenEndpointAuthenticationMethod',
    tokenEndpointUrl: 'tokenEndpointUrl',

    // the properties below are optional
    clientCredentials: {
      tokenRequestSecretArn: 'tokenRequestSecretArn',
    },
    clientCredentialsAssertion: {
      audience: 'audience',
      signingAlgorithm: 'signingAlgorithm',

      // the properties below are optional
      tokenRequestSecretArn: 'tokenRequestSecretArn',
    },
    iamJwtBearer: {
      audience: 'audience',
      signingAlgorithm: 'signingAlgorithm',

      // the properties below are optional
      tokenRequestSecretArn: 'tokenRequestSecretArn',
    },
    scope: 'scope',
    tokenEndpointTlsCertificateArn: 'tokenEndpointTlsCertificateArn',
  },
  saslScram: {
    mechanism: 'mechanism',
    secretArn: 'secretArn',
  },
};
```

## Properties

- `mtls`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnReplicator.KafkaClusterMtlsAuthenticationProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_msk.CfnReplicator.KafkaClusterMtlsAuthenticationProperty.html) — Details for mTLS client authentication.

- `saslOAuthBearer`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnReplicator.KafkaClusterSaslOAuthBearerAuthenticationProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_msk.CfnReplicator.KafkaClusterSaslOAuthBearerAuthenticationProperty.html) — Details for client authentication using SASL/OAUTHBEARER.

- `saslScram`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnReplicator.KafkaClusterSaslScramAuthenticationProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_msk.CfnReplicator.KafkaClusterSaslScramAuthenticationProperty.html) — Details for SASL/SCRAM client authentication.