MSK cluster should not allow unauthenticated client access

What it checks

MSK cluster: unauthenticated client access is enabled.

Where it applies

Terraform: aws_msk_cluster

CloudFormation: AWS::MSK::Cluster

How to fix it

1. Disable unauthenticated access and enable SASL/IAM or SASL/SCRAM authentication. Update Kafka clients to authenticate before connecting.

Frameworks

• AWS FSBP MSK.6
• SOC 2 CC6.1
• HIPAA 164.312(d)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules