AWS Security ChangesHomeSearch

AWS msk documentation change

Service: msk · 2025-06-13 · Documentation low

File: msk/latest/developerguide/msk-serverless-create-topic.md

Summary

Added detailed instructions for setting up environment with AWS MSK IAM JAR file and classpath configuration for IAM authentication

Security assessment

The change documents IAM authentication requirements for MSK Serverless clusters, which is a security feature. However, there is no evidence of addressing a specific security vulnerability.

Diff

diff --git a/msk/latest/developerguide/msk-serverless-create-topic.md b/msk/latest/developerguide/msk-serverless-create-topic.md
index 1ebb84ef0..2bc293b10 100644
--- a//msk/latest/developerguide/msk-serverless-create-topic.md
+++ b//msk/latest/developerguide/msk-serverless-create-topic.md
@@ -4,0 +5,2 @@
+Setting up your environment for creating topicsCreating a topic and writing data to it
+
@@ -9 +11,31 @@ In this step, you use the previously created client machine to create a topic on
-###### To create a topic and write data to it
+###### Topics
+
+  * Setting up your environment for creating topics
+
+  * Creating a topic and writing data to it
+
+
+
+
+## Setting up your environment for creating topics
+
+  * Before creating a topic, make sure that you've downloaded the AWS MSK IAM JAR file to your Kafka installation's `libs/` directory. If you haven't done this yet, run the following command in your Kafka's `libs/` directory.
+    
+        wget https://github.com/aws/aws-msk-iam-auth/releases/download/v2.3.0/aws-msk-iam-auth-2.3.0-all.jar
+
+This JAR file is required for IAM authentication with your MSK Serverless cluster.
+
+  * When running Kafka commands, you might need to make sure the `classpath` includes the AWS MSK IAM JAR file. To do this, do one of the following:
+
+    * Set the `CLASSPATH` environment variable to include your Kafka libraries as shown in the following example.
+        
+                export CLASSPATH=<path-to-your-kafka-installation>/libs/*:<path-to-your-kafka-installation>/libs/aws-msk-iam-auth-2.3.0-all.jar
+
+    * Run Kafka commands using the full Java command with explicit `classpath`, as shown in the following example.
+        
+                java -cp "<path-to-your-kafka-installation>/libs/*:<path-to-your-kafka-installation>/libs/aws-msk-iam-auth-2.3.0-all.jar" org.apache.kafka.tools.TopicCommand --bootstrap-server $BS --command-config client.properties --create --topic msk-serverless-tutorial --partitions 6
+
+
+
+
+## Creating a topic and writing data to it