MSK clusters should not be publicly accessible and should use private subnets

amazon-msk
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

MSK clusters should not be publicly accessible and should be deployed in private subnets. Keeping brokers in private subnets reduces exposure to the public internet and limits access to approved network paths.

Remediation

Disable public access for brokers and place the cluster in subnets that do not assign public IPs on launch. For guidance, refer to Configuring public access for a cluster.