AWS Security ChangesHomeSearch

AWS msk documentation change

Service: msk · 2026-06-25 · Documentation low

File: msk/latest/developerguide/migration.md

Summary

Updated migration documentation to specify support for SASL/SCRAM and mutual TLS (mTLS) authentication when migrating from non-MSK Kafka clusters.

Security assessment

The change explicitly documents support for secure authentication protocols (SASL/SCRAM and mTLS) during migrations, improving security guidance but not addressing a specific vulnerability.

Diff

diff --git a/msk/latest/developerguide/migration.md b/msk/latest/developerguide/migration.md
index 3e6817b85..fa527694e 100644
--- a//msk/latest/developerguide/migration.md
+++ b//msk/latest/developerguide/migration.md
@@ -9 +9 @@
-Amazon MSK Replicator supports replication between Amazon MSK clusters in the same AWS account. It also supports migrations between non-MSK Apache Kafka clusters and Amazon MSK clusters. For cross-account replication between Amazon MSK clusters, you must use Apache MirrorMaker 2.0.
+Amazon MSK Replicator supports replication between Amazon MSK clusters in the same AWS account. It also supports migrations between non-MSK Apache Kafka clusters and Amazon MSK clusters using SASL/SCRAM or mutual TLS (mTLS) authentication. For cross-account replication between Amazon MSK clusters, you must use Apache MirrorMaker 2.0.