AWS AWSCloudFormation documentation change
Summary
Added SASL configuration requirements and IAM/SCRAM details
Security assessment
Expands on secure authentication setup without referencing specific issues
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-sasl.md b/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-sasl.md index 8126896ef..dc8f4a1a6 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-sasl.md +++ b//AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-sasl.md @@ -7 +7 @@ SyntaxProperties -The `Sasl` property type specifies Property description not available. for an [AWS::MSK::Cluster](./aws-resource-msk-cluster.html). +Details for client authentication using SASL. To turn on SASL, you must also turn on `EncryptionInTransit` by setting `inCluster` to true. You must set `clientBroker` to either `TLS` or `TLS_PLAINTEXT`. If you choose `TLS_PLAINTEXT`, then you must also set `unauthenticated` to true. @@ -36 +36 @@ To declare this entity in your AWS CloudFormation template, use the following sy -Property description not available. +Details for ClientAuthentication using IAM. @@ -47 +47 @@ _Required_ : No -Property description not available. +Details for SASL/SCRAM client authentication.