search

aws / aws-msk-iam-auth

Enables developers to use AWS Identity and Access Management (IAM) to connect to their Amazon Managed Streaming for Apache Kafka (Amazon MSK) clusters.
Apache License 2.0
138 stars 65 forks source link

MSK multi-VPC private connectivity authentication error #178

Closed prabodh1194 closed 2 weeks ago

prabodh1194 commented 2 weeks ago

Hi,

I have done a multi-vpc setup for my MSK as per the doc - https://docs.aws.amazon.com/msk/latest/developerguide/mvpc-cross-account-permissions.html

I have MSK in account A & client in account B.

Whenever I try to connect to the broker, I keep getting unauthenticated error.

24/06/12 16:47:09 INFO Selector: [Consumer clientId=consumer-***, groupId=***] Failed authentication with b-4.iam.***.kafka.us-east-1.amazonaws.com/*** ([801a58bb-5b0e-455a-9ca9-a2e8ab3d6bff]: Access denied)

I can't figure out how to troubleshoot this error. How to figure out what am I missing?

prabodh1194 commented 2 weeks ago

nvm. found the issue in: https://medium.com/@venkatasaimahesh.s/how-to-access-cross-account-msk-connector-with-aws-msk-through-iam-authentication-6ad30a8876e7

solved it as well.

I think AWS doc needs to update the recipe for auth to be a bit more explicit & clear.

github-actions[bot] commented 2 weeks ago

This issue is now closed. Comments on closed issues are hard for our team to see. If you need more assistance, please open a new issue that references this one.