💼 [MSK.4] MSK clusters should have public access disabled

• ID: /frameworks/aws-fsbp-v1.0.0/msk/04

Description

By default, clients can access an Amazon MSK cluster only if they're in the same VPC as the cluster. All communication between Kafka clients and an MSK cluster are private by default and streaming data doesn't traverse the internet. However, if an MSK cluster is configured to allow public access, anyone on the internet can establish a connection to Apache Kafka brokers that are running within the cluster. This can lead to issues such as unauthorized access, data breaches, or exploitation of vulnerabilities. If you restrict access to a cluster by requiring authentication and authorization measures, you can help protect sensitive information and maintain the integrity of your resources.

Similar

• AWS Security Hub
  • https://docs.aws.amazon.com/securityhub/latest/userguide/msk-controls.html#msk-4

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance