AWS AWSCloudFormation medium security documentation change
Summary
Added MTLS authentication option and changed SASL authentication from required to optional
Security assessment
The change adds MTLS (Mutual TLS) authentication, which enhances security through certificate-based mutual authentication. Changing SASL from required to optional allows for MTLS as a more secure alternative, improving authentication security for Kafka clusters.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-msk-replicator-kafkaclusterclientauthentication.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-msk-replicator-kafkaclusterclientauthentication.md index 5deebe523..b01aa0f44 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-msk-replicator-kafkaclusterclientauthentication.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-msk-replicator-kafkaclusterclientauthentication.md @@ -20,0 +21 @@ To declare this entity in your CloudFormation template, use the following syntax + "MTLS" : [KafkaClusterMtlsAuthentication](./aws-properties-msk-replicator-kafkaclustermtlsauthentication.html), @@ -27,0 +29,2 @@ To declare this entity in your CloudFormation template, use the following syntax + MTLS: + [KafkaClusterMtlsAuthentication](./aws-properties-msk-replicator-kafkaclustermtlsauthentication.html) @@ -33,0 +37,11 @@ To declare this entity in your CloudFormation template, use the following syntax +`MTLS` + + +Property description not available. + +_Required_ : No + + _Type_ : [KafkaClusterMtlsAuthentication](./aws-properties-msk-replicator-kafkaclustermtlsauthentication.html) + + _Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + @@ -39 +53 @@ Details for SASL/SCRAM client authentication. -_Required_ : Yes +_Required_ : No