MSK clusters should not be publicly accessible and should use private subnets

amazon-msk
이 페이지는 아직 한국어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Description

MSK clusters should not be publicly accessible and should be deployed in private subnets. Keeping brokers in private subnets reduces exposure to the public internet and limits access to approved network paths.

Remediation

Disable public access for brokers and place the cluster in subnets that do not assign public IPs on launch. For guidance, refer to Configuring public access for a cluster.