EncryptionInTransitConfig
- class aws_cdk.aws_msk_alpha.EncryptionInTransitConfig(*, client_broker=None, enable_in_cluster=None)
Bases:
object
(experimental) The settings for encrypting data in transit.
- Parameters:
client_broker (
Optional
[ClientBrokerEncryption
]) – (experimental) Indicates the encryption setting for data in transit between clients and brokers. Default: - TLSenable_in_cluster (
Optional
[bool
]) – (experimental) Indicates that data communication among the broker nodes of the cluster is encrypted. Default: true
- See:
https://docs.aws.amazon.com/msk/latest/developerguide/msk-encryption.html#msk-encryption-in-transit
- Stability:
experimental
- ExampleMetadata:
infused
Example:
import aws_cdk.aws_acmpca as acmpca # vpc: ec2.Vpc cluster = msk.Cluster(self, "Cluster", cluster_name="myCluster", kafka_version=msk.KafkaVersion.V2_8_1, vpc=vpc, encryption_in_transit=msk.EncryptionInTransitConfig( client_broker=msk.ClientBrokerEncryption.TLS ), client_authentication=msk.ClientAuthentication.tls( certificate_authorities=[ acmpca.CertificateAuthority.from_certificate_authority_arn(self, "CertificateAuthority", "arn:aws:acm-pca:us-west-2:1234567890:certificate-authority/11111111-1111-1111-1111-111111111111") ] ) )
Attributes
- client_broker
(experimental) Indicates the encryption setting for data in transit between clients and brokers.
- Default:
TLS
- Stability:
experimental
- enable_in_cluster
(experimental) Indicates that data communication among the broker nodes of the cluster is encrypted.
- Default:
true
- Stability:
experimental