Apache Kafka Security in Confluent Cloud - Project Metamorphosis Month 6

This post details Confluent Cloud's security posture, emphasizing defense in depth. It highlights TLS/SSL encryption for transit, at-rest encryption with BYOK support on AWS, and AWS PrivateLink for secure network access. Authentication is enforced via SASL PLAIN and SSO integration. Authorization is managed through Role-Based Access Control (RBAC) for management operations and Access Control Lists (ACLs) for data access. An Audit Log is introduced to track changes to clusters.