AWS cli documentation change

Service: cli · 2026-04-22 · Documentation low

File: cli/latest/reference/kafka/describe-replicator.md

Summary

Added documentation for new fields in Kafka replicator including ApacheKafkaCluster details, ClientAuthentication with SASL/SCRAM mechanism, EncryptionInTransit with TLS support, ConsumerGroupOffsetSyncMode, and LogDelivery configuration for CloudWatch, Firehose, and S3

Security assessment

This change adds documentation for security features including SASL/SCRAM authentication mechanisms (SHA256/SHA512), encryption in transit with TLS, and root CA certificate management. These are security enhancements being documented, not fixes for existing vulnerabilities. The change expands on existing security documentation rather than addressing a specific security issue.

Diff

diff --git a/cli/latest/reference/kafka/describe-replicator.md b/cli/latest/reference/kafka/describe-replicator.md
index f8d8714d9..c3154c70c 100644
--- a//cli/latest/reference/kafka/describe-replicator.md
+++ b//cli/latest/reference/kafka/describe-replicator.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
@@ -237,0 +238,12 @@ KafkaClusters -> (list)
+>> ApacheKafkaCluster -> (structure)
+>>
+>>> Details of an Apache Kafka Cluster.
+>>> 
+>>> ApacheKafkaClusterId -> (string) [required]
+>>>
+>>>> The ID of the Apache Kafka cluster.
+>>> 
+>>> BootstrapBrokerString -> (string) [required]
+>>>
+>>>> The bootstrap broker string of the Apache Kafka cluster.
+>> 
@@ -256,0 +269,41 @@ KafkaClusters -> (list)
+>> 
+>> ClientAuthentication -> (structure)
+>>
+>>> Details of the client authentication used by the Apache Kafka cluster.
+>>> 
+>>> SaslScram -> (structure) [required]
+>>>
+>>>> Details for SASL/SCRAM client authentication.
+>>>> 
+>>>> Mechanism -> (string) [required]
+>>>>
+>>>>> The SASL/SCRAM authentication mechanism.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `SHA256`
+>>>>>   * `SHA512`
+>>>>> 
+
+>>>> 
+>>>> SecretArn -> (string) [required]
+>>>>
+>>>>> The Amazon Resource Name (ARN) of the Secrets Manager secret.
+>> 
+>> EncryptionInTransit -> (structure)
+>>
+>>> Details of encryption in transit to the Apache Kafka cluster.
+>>> 
+>>> EncryptionType -> (string) [required]
+>>>
+>>>> The type of encryption in transit to the Apache Kafka cluster.
+>>>> 
+>>>> Possible values:
+>>>> 
+>>>>   * `TLS`
+>>>> 
+
+>>> 
+>>> RootCaCertificate -> (string)
+>>>
+>>>> The root CA certificate.
@@ -300,0 +354,11 @@ ReplicationInfoList -> (list)
+>>> 
+>>> ConsumerGroupOffsetSyncMode -> (string)
+>>>
+>>>> The consumer group offset synchronization mode. With LEGACY, offsets are synchronized when producers write to the source cluster. With ENHANCED, consumer offsets are synchronized regardless of producer location. ENHANCED requires a corresponding replicator that replicates data from the target cluster to the source cluster.
+>>>> 
+>>>> Possible values:
+>>>> 
+>>>>   * `LEGACY`
+>>>>   * `ENHANCED`
+>>>> 
+
@@ -447,0 +512,48 @@ Tags -> (map)
+LogDelivery -> (structure)
+
+> Configuration for log delivery.
+> 
+> ReplicatorLogDelivery -> (structure)
+>
+>> Configuration for replicator log delivery.
+>> 
+>> CloudWatchLogs -> (structure)
+>>
+>>> Configuration for CloudWatch Logs delivery.
+>>> 
+>>> Enabled -> (boolean) [required]
+>>>
+>>>> Whether log delivery to CloudWatch Logs is enabled.
+>>> 
+>>> LogGroup -> (string)
+>>>
+>>>> The CloudWatch log group that is the destination for log delivery.
+>> 
+>> Firehose -> (structure)
+>>
+>>> Configuration for Firehose delivery.
+>>> 
+>>> Enabled -> (boolean) [required]
+>>>
+>>>> Whether log delivery to Firehose is enabled.
+>>> 
+>>> DeliveryStream -> (string)
+>>>
+>>>> The Firehose delivery stream that is the destination for log delivery.
+>> 
+>> S3 -> (structure)
+>>
+>>> Configuration for S3 delivery.
+>>> 
+>>> Enabled -> (boolean) [required]
+>>>
+>>>> Whether log delivery to S3 is enabled.
+>>> 
+>>> Bucket -> (string)
+>>>
+>>>> The S3 bucket that is the destination for log delivery.
+>>> 
+>>> Prefix -> (string)
+>>>
+>>>> The S3 prefix that is the destination for log delivery.
+
@@ -458 +570 @@ Tags -> (map)
-  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.34 Command Reference](../../index.html) »