MSK clusters should use ZooKeeper TLS and security groups

amazon-msk
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Description

ZooKeeper nodes for MSK clusters should use TLS and be protected by security groups. TLS protects ZooKeeper traffic in transit, and security groups restrict access to approved network paths.

Remediation

Enable ZooKeeper TLS and associate security groups with the broker node group. For guidance, refer to MSK cluster security settings.