AWS msk documentation change
Summary
Added new IPv6 port mappings for broker communication: plaintext (20092), IAM access control (20098), SASL/SCRAM (20096), and TLS encryption (20094).
Security assessment
Documents new ports for encrypted communication (TLS) and authentication (IAM/SASL) over IPv6. While not fixing a security issue, it adds documentation for security-relevant network configurations supporting IPv6 deployments.
Diff
diff --git a/msk/latest/developerguide/port-info.md b/msk/latest/developerguide/port-info.md index f1f3b5941..78dd7d267 100644 --- a//msk/latest/developerguide/port-info.md +++ b//msk/latest/developerguide/port-info.md @@ -17 +17,7 @@ Use the following port numbers so that Amazon MSK can communicate with client ma - * To communicate with Apache ZooKeeper by using TLS encryption, use port 2182. Apache ZooKeeper nodes use port 2181 by default. + * To communicate with brokers using IPv6 network type in plaintext, use port 20092 + + * To communicate with brokers in a cluster that is set up to use IAM access control using IPv6, use port 20098. + + * To communicate with brokers with SASL/SCRAM using IPv6, use port 20096. + + * To communicate with brokers with TLS encryption using IPv6, use port 20094.