Describing Kafka security in AsyncAPI

on YouTube ↗07m

" summary

AsyncAPI maps Kafka encryption and auth to concrete client settings: use kafka for no TLS and kafka-secure for TLS, map security scheme types (plain, scramsha256, scramsha512, oauth2, gssapi, x509) to Kafka configs like security.protocol = PLAINTEXT / SASL_PLAINTEXT / SASL_SSL and sasl.mechanism = PLAIN / SCRAM-SHA-256 / SCRAM-SHA-512; examples show Java Properties and properties-file values. AsyncAPI Generator and a Node-RED plugin already produce matching configs and a new Java template from a hackathon is pending contribution.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 0:59no encryption
3. 1:34authentication
4. 5:58Tools that understand this

" related talks

• 41mKafka Security - A brief overview of its history ... #bbuzzSönke Liebau · Berlin Buzzwords 2018
• 23mSchema-Driven Redaction of sensitive fields in Kafka Events Using AsyncAPIAbijith · Apidays India 2025
• 30mThe Secure Metamorphosis: Streaming Logs with Kafka and TLSTyler Paxton · BSidesSF 2019
• 27mEnd-to-End Encryption for Streaming Data PipelinesHans-Peter Grahsl · Berlin Buzzwords 2024
• 51mClient-Side Field-Level Encryption for Apache Kafka ConnectHans-Peter Grahsl · Voxxed Days Luxembourg 2022
• 23mKafka Is Not Always the Answer: Making Smart AsyncAPI Architecture DecisionsSneha · Apidays India 2025
• 39mManage, secure, and socialize Kafka topicsNewton Piccone · Apidays LIVE Jakarta 2021
• 23mSimplifying Kafka Governance for DevelopersMuralidhar Basani · Conf42 DevSecOps 2023