Posted On: Dec 18, 2020

AWS Lambda functions that are triggered from an HAQM Managed Streaming for Apache Kafka (HAQM MSK) topic can now access to usernames and passwords secured by AWS Secrets Manager using SASL/SCRAM (Simple Authentication and Security Layer/Salted Challenge Response Authentication Mechanism).  

SASL/SCRAM is a popular authentication mechanism supported by Apache Kafka. To get started, customers who select HAQM MSK as the event source for their Lambda function can choose SASL/SCRAM as their authentication mechanism, and select their credentials from Secrets Manager on the AWS Management Console, AWS CLI or AWS SDK for Lambda. This feature requires no additional charge to use, and is available in all AWS Regions where HAQM MSK is supported as an event source for AWS Lambda. To learn more about using SASL/SCRAM authentication for your Lambda functions triggered from HAQM MSK topics, read the Lambda Developer Guide.