Interface ISaslAuthProps

(experimental) SASL authentication properties.

Namespace: Amazon.CDK.AWS.MSK.Alpha
Assembly: Amazon.CDK.AWS.MSK.Alpha.dll
Syntax (csharp)
public interface ISaslAuthProps
Syntax (vb)
Public Interface ISaslAuthProps
Remarks

Stability: Experimental

ExampleMetadata: infused

Examples
Vpc vpc;

var cluster = new Cluster(this, "cluster", new ClusterProps {
    ClusterName = "myCluster",
    KafkaVersion = KafkaVersion.V3_8_X,
    Vpc = vpc,
    EncryptionInTransit = new EncryptionInTransitConfig {
        ClientBroker = ClientBrokerEncryption.TLS
    },
    ClientAuthentication = ClientAuthentication.Sasl(new SaslAuthProps {
        Scram = true
    })
});

Synopsis

Properties

Iam

(experimental) Enable IAM access control.
Key

(experimental) KMS Key to encrypt SASL/SCRAM secrets.
Scram

(experimental) Enable SASL/SCRAM authentication.

Properties

Iam

(experimental) Enable IAM access control.

virtual Nullable<bool> Iam { get; }
Property Value

System.Nullable<System.Boolean>

Remarks

Default: false

Stability: Experimental

Key

(experimental) KMS Key to encrypt SASL/SCRAM secrets.

virtual IKey Key { get; }
Property Value

IKey

Remarks

You must use a customer master key (CMK) when creating users in secrets manager. You cannot use a Secret with Amazon MSK that uses the default Secrets Manager encryption key.

Default: - CMK will be created with alias msk/{clusterName}/sasl/scram

Stability: Experimental

Scram

(experimental) Enable SASL/SCRAM authentication.

virtual Nullable<bool> Scram { get; }
Property Value

System.Nullable<System.Boolean>

Remarks

Default: false

Stability: Experimental