MSK Kafka Cluster
Managed Streaming for Apache Kafka.
Configuration
Section titled “Configuration”| Setting | Type | Required | Default |
|---|---|---|---|
| Cluster name | Text | Yes | — |
| Kafka version | Text | — | 3.7.x |
| Broker instance type Options: kafka.t3.small — 2v · 2 GiB, kafka.m5.large — 2v · 8 GiB, kafka.m5.xlarge — 4v · 16 GiB, kafka.m5.2xlarge — 8v · 32 GiB, kafka.m5.4xlarge — 16v · 64 GiB, kafka.m5.8xlarge — 32v · 128 GiB, kafka.m5.12xlarge — 48v · 192 GiB, kafka.m5.16xlarge — 64v · 256 GiB, kafka.m5.24xlarge — 96v · 384 GiB, kafka.m7g.large — 2v · 8 GiB, kafka.m7g.xlarge — 4v · 16 GiB, kafka.m7g.2xlarge — 8v · 32 GiB, kafka.m7g.4xlarge — 16v · 64 GiB, kafka.m7g.8xlarge — 32v · 128 GiB, kafka.m7g.12xlarge — 48v · 192 GiB, kafka.m7g.16xlarge — 64v · 256 GiB | Choice | — | kafka.m5.large |
| Broker nodes | Number | — | 3 |
| EBS per broker (GiB) | Number | — | 100 |
| Monitoring level Options: Default, Per broker, Per topic/broker, Per topic/partition | Choice | — | DEFAULT |
| JMX exporter (Prometheus) | Toggle | — | false |
| Node exporter (Prometheus) | Toggle | — | false |
| Storage mode Options: Local, Tiered | Choice | — | LOCAL |
| Provisioned throughput (MiB/s) | Number | — | — |
| TLS in transit | Toggle | — | true |
| Client-broker encryption Options: TLS, TLS + Plaintext, Plaintext | Choice | — | TLS |
| KMS key ARN | Text | — | — |
| IAM SASL auth | Toggle | — | true |
| SCRAM SASL auth | Toggle | — | false |
| TLS client auth | Toggle | — | false |
| Allow unauthenticated | Toggle | — | false |
| CloudWatch logs | Toggle | — | false |
| CloudWatch log group | Text | — | — |
| Firehose logs | Toggle | — | false |
| Firehose delivery stream | Text | — | — |
| S3 logs | Toggle | — | false |
| S3 log bucket | Text | — | — |
| S3 log prefix | Text | — | — |
| Tags | Key–value | — | — |
Connections
Section titled “Connections”| Socket | Direction | Accepts | Terraform arg |
|---|---|---|---|
| Subnetsmulti | Input | aws.subnet | broker_node_group_info.client_subnets |
| Security groupsmulti | Input | aws.security-group | broker_node_group_info.security_groups |
| Encryption KMS key | Input | aws.kms-key | encryption_info.encryption_at_rest_kms_key_arn |
| Producers / Consumers | Output | any | — |