MSK Replicator now supports mutual TLS (mTLS) authentication for replication from external Apache Kafka clusters to MSK Express brokers
Share
Services
Amazon MSK Replicator now supports mutual TLS (mTLS) authentication for data replication from external Apache Kafka clusters - including on-premises, self-managed on AWS, or other cloud providers - to [Amazon MSK Express brokers](https://aws.amazon.com/msk/features/express-brokers-for-amazon-msk/). With this capability, external Apache Kafka clusters configured with mTLS authentication can now use MSK Replicator to migrate workloads to MSK Express brokers, support disaster recovery by using MSK Express-based clusters as a failover or backup target, and enable data distribution across hybrid and multi-cloud environments.
MSK Replicator is a feature of Amazon MSK that automates data replication between Kafka clusters, eliminating the need to manage custom replication infrastructure or configure open-source tools. Previously, MSK Replicator supported SASL/SCRAM authentication only for connecting to external Apache Kafka clusters. With this launch, you can now also use mTLS authentication with MSK Replicator to replicate data from external Kafka clusters to Express brokers on Amazon MSK. Unlike self-managed replication tools, MSK Replicator lets you retain your original Kafka topic names during replication while automatically avoiding infinite replication loops. It also synchronizes consumer group offsets bidirectionally, enabling you to move producers and consumers across clusters independently, in any order, without coordination constraints or the risk of data loss.
This new capability is supported in all AWS Regions where MSK Express brokers are available. Visit the MSK Replicator [documentation](https://docs.aws.amazon.com/msk/latest/developerguide/msk-replicator.html), [product page](https://aws.amazon.com/msk/features/msk-replicator/), [pricing page](https://aws.amazon.com/msk/pricing/), and this [AWS blog post](https://aws.amazon.com/blogs/big-data/migrate-third-party-and-self-managed-apache-kafka-clusters-to-amazon-msk-express-brokers-with-amazon-msk-replicator/) to learn more.
What else is happening at Amazon Web Services?
SageMaker Notebook Instances now support G6e instance types
about 6 hours ago
Services
Share
Amazon Bedrock AgentCore Memory now supports cross-account access
about 7 hours ago
Services
Share
Read update
Services
Share
Automated Reasoning checks in Amazon Bedrock Guardrails add new policy refinement workflows
about 8 hours ago
Services
Share
Amazon OpenSearch Service now offers AI-assisted migrations
about 20 hours ago
Services
Share