non-IAM authentication for MSK Serverless

0

Since IAM authentication on MSK requires monkey-patching the client libraries's classpath in order to work, it's unsuitable for the vast majority of use cases, such as:

  • Usage with any non-JVM Kafka tools or libraries
  • Lambda code written in any non-JVM language (most 'serverless' code is NOT written for JVM)
  • Scenarios where modifying a packaged JVM client library would void support contracts
  • Scenarios where maintaining modifications to packaged JVM clients every time they're updated is not realistic I'm trying to think of realistic scenarios where a development team would want the simplicity and lack of maintenance of a serverless kafka cluster, but also are willing to commit to throwing out the majority of the available Kafka tools and libraries out there, while also committing to maintaining monkey-patched versions of all of the remaining tools. It's pretty difficult for me to imagine. Given the above, are there any plans for the future to support any security mechanisms on MSK Serverless other than IAM? If not, given the enormous compromises required in order to support IAM usage on MSK, who is the MSK Serverless offering actually targeted at?
已提問 2 年前檢視次數 1121 次
1 個回答
0

Thank you for raising a request with AWS.

Please note that currently the IAM based authentication is the only security mechanism. Inorder to check for future release timeline of other security mechanism and answer to your questions we would be required to reach out internal service team and PM team. Thus we request you to please open a support case with AWS support. Please refer to the following links on how to open a case and support plans available:

-- https://docs.aws.amazon.com/awssupport/latest/user/case-management.html

-- https://aws.amazon.com/premiumsupport/pricing/

AWS
支援工程師
已回答 2 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南