All checks

Medium MSK · regional

MSK clusters should be encrypted in transit among broker nodes

Confirms that Amazon MSK clusters encrypt data in transit between broker nodes using TLS, with no plain-text connections permitted.

service: MSK
severity: Medium
scope: evaluated in every region

How to fix it

Enable TLS encryption for in-cluster broker node communication.

Navigate to the Amazon MSK console
Select the MSK cluster
Enable 'Encryption in transit' with 'In-cluster encryption' on
Verify encryption is enabled

See which of your accounts this check is failing on.

Book a demo