aws-msk: msk now supports multiple authentication mechanisms

[michielvandriessche]

Describe the feature

MSK now supports multiple authentication mechanisms at the same time but this cdk cod has not yet been adjusted to match this

Use Case

We are migration toward iam authentication and it would be usefull to be able to enable both at the same time

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.172.0

Environment details (OS name and version, etc.)

amazon linux build server

[ashishdhingra]

@michielvandriessche Good morning. Thanks for opening the feature request. Could you please elaborate the details in feature request like MSK doc that specifies multiple authentication modes, CloudFormation documentation showing the support and current behavior in CDK with an example? This would enable us to effectively triage this request.

I found the blog post announcement https://aws.amazon.com/about-aws/whats-new/2021/09/amazon-msk-multiple-authentication-modes-tls-encryption-settings/ which is dated back to 2021.

Thanks,
Ashish

[github-actions]

This issue has not received a response in a while. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.

[michielvandriessche]

Hi,

Cloudformation documentation does not specify any limitations on the setting of multiple authentication methods. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-clientauthentication.html

Currently CDK checks if multiple authentications have been set. And throws an error.

aws-cdk/packages/@aws-cdk/aws-msk-alpha/lib/cluster.ts

Line 503 in 1bbab84

throw Error('Only one client authentication method can be enabled.');