AWS dms medium security documentation change

Service: dms · 2026-01-31 · Security-related medium

File: dms/latest/userguide/CHAP_Target.Kafka.md

Summary

Added note that SASL Authentication is only supported for Apache Kafka versions up to 3.8, and unsupported in Kafka 4.0+

Security assessment

Explicitly documents authentication limitations that could lead to insecure configurations if ignored. Kafka 4.0+ users might unknowingly use unauthenticated connections, increasing MITM/unauthorized access risks. Evidence: Direct mention of authentication support boundaries.

Diff

diff --git a/dms/latest/userguide/CHAP_Target.Kafka.md b/dms/latest/userguide/CHAP_Target.Kafka.md
index cc7d6c46e..c4e476d95 100644
--- a//dms/latest/userguide/CHAP_Target.Kafka.md
+++ b//dms/latest/userguide/CHAP_Target.Kafka.md
@@ -514,0 +515,2 @@ If you are using your own Kafka instance installed on Amazon EC2, modify the Kaf
+  * AWS DMS supports SASL Authentication for Apache Kafka versions up to 3.8. If you are using Kafka 4.0 or higher, you can only connect without SASL authentication.
+