Support for SASL OAUTHBEARER for MSK

Question

We use SASL OAUTHBEARER for our on-prem authentication and looks like Amazon MSK currently does not support that. It would be great if anyone from Amazon MSK team let us know if the support the same is planned in near future.

similar feature is avaiable on confluent.

https://docs.confluent.io/platform/current/kafka/authentication_sasl/authentication_sasl_oauth.html#

Answer

We tried to integrate with third party idp, but the solution is not working as expected. It would be nice if you provide oauth feature asap. Otherwise wise customers will look for alternatives.

Answer

Hi there, thank you for providing your valuable feedback on the service. I have raised a feature request with the service team on your behalf. While I am unable to comment on if/when this feature may get released, I request you to keep an eye on our What's New (1) and Blog pages (2) for any new feature announcements. However please note MSK’s integration with IAM supports standard IAM features like role-based access control, and support for external identity providers including OpenID Connect for OAuthBearer authentication (3).

(1) https://aws.amazon.com/new/

(2) https://aws.amazon.com/blogs/aws/

(3) https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp.html

(1) https://aws.amazon.com/new/

(2) https://aws.amazon.com/blogs/aws/

(3) https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp.html

Support for SASL OAUTHBEARER for MSK

Relevant content