AWS Lambda supports OAuth authentication for self-managed Apache Kafka event sources
AWS Lambda now supports OAuth authentication for self-managed Apache Kafka event source mappings, enabling customers to authenticate through their enterprise identity provider
AWS Lambda now supports OAuth authentication for customer-managed Apache Kafka event source mappings (ESM). This allows customers to authenticate Kafka ESM through corporate identity providers such as Amazon Cognito or Okta, meeting security and compliance requirements for Kafka applications. Kafka ESM is used to build event-driven workloads like payment processing, fraud detection, and real-time data pipelines, offering auto-scaling, error handling, batch processing, and event filtering. Previously limited to SASL/PLAIN, SASL/SCRAM, and mutual TLS (mTLS), Kafka ESM was unavailable to regulated industry customers requiring OAuth. With OAuth support, customers can authenticate Kafka ESM using their corporate identity provider, applying consistent identity governance and access policies across Kafka clusters and Lambda consumers. This feature is available in all AWS commercial regions where customer-managed Kafka ESM is offered. To use OAuth authentication, create a new Kafka ESM via the AWS Management Console, Lambda API, AWS CLI, AWS CloudFormation, or AWS SAM with the authentication settings configured.
Why it matters
Affects customers building event-driven Kafka workloads using Kafka ESM, especially those in regulated industries