AWS AWSCloudFormation documentation change
Summary
Added new properties (ApacheKafkaCluster, ClientAuthentication, EncryptionInTransit) to KafkaCluster object, made AmazonMskCluster and VpcConfig optional, and updated related links
Security assessment
The change adds documentation for ClientAuthentication and EncryptionInTransit properties which are security features for MSK replicator. These properties allow configuring authentication and encryption in transit for Kafka clusters, enhancing security posture. However, there is no evidence this addresses a specific security vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-msk-replicator-kafkacluster.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-msk-replicator-kafkacluster.md index aa308a65b..f19d1bc9e 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-msk-replicator-kafkacluster.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-msk-replicator-kafkacluster.md @@ -19,0 +20,3 @@ To declare this entity in your CloudFormation template, use the following syntax + "ApacheKafkaCluster" : [ApacheKafkaCluster](./aws-properties-msk-replicator-apachekafkacluster.html), + "ClientAuthentication" : [KafkaClusterClientAuthentication](./aws-properties-msk-replicator-kafkaclusterclientauthentication.html), + "EncryptionInTransit" : [KafkaClusterEncryptionInTransit](./aws-properties-msk-replicator-kafkaclusterencryptionintransit.html), @@ -28,0 +32,6 @@ To declare this entity in your CloudFormation template, use the following syntax + ApacheKafkaCluster: + [ApacheKafkaCluster](./aws-properties-msk-replicator-apachekafkacluster.html) + ClientAuthentication: + [KafkaClusterClientAuthentication](./aws-properties-msk-replicator-kafkaclusterclientauthentication.html) + EncryptionInTransit: + [KafkaClusterEncryptionInTransit](./aws-properties-msk-replicator-kafkaclusterencryptionintransit.html) @@ -40 +49 @@ Details of an Amazon MSK Cluster. -_Required_ : Yes +_Required_ : No @@ -45,0 +55,33 @@ _Required_ : Yes +`ApacheKafkaCluster` + + +Details of an Apache Kafka cluster. Exactly one of amazonMskCluster and apacheKafkaCluster is required. + +_Required_ : No + + _Type_ : [ApacheKafkaCluster](./aws-properties-msk-replicator-apachekafkacluster.html) + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + +`ClientAuthentication` + + +Details of the client authentication used by the Apache Kafka cluster. + +_Required_ : No + + _Type_ : [KafkaClusterClientAuthentication](./aws-properties-msk-replicator-kafkaclusterclientauthentication.html) + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + +`EncryptionInTransit` + + +Details of encryption in transit to the Apache Kafka cluster. + +_Required_ : No + + _Type_ : [KafkaClusterEncryptionInTransit](./aws-properties-msk-replicator-kafkaclusterencryptionintransit.html) + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + @@ -51 +93 @@ Details of an Amazon VPC which has network connectivity to the Apache Kafka clus -_Required_ : Yes +_Required_ : No @@ -63 +105 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -ConsumerGroupReplication +Firehose @@ -65 +107 @@ ConsumerGroupReplication -KafkaClusterClientVpcConfig +KafkaClusterClientAuthentication