使用 SASL/SCRAM 的 AWS MSK 公共集群身份验证

Question

AWS MSK 的配置是公开的，并附加了一个秘密。安全设置设置为启用 SASL_SCRAM，allow.everyone.if.no.acl.found=false 和 auto.create.topics.enable=true 设置为书面。我正在尝试使用下面的给定代码连接到集群。但收到错误“代码 29：TOPIC_AUTHORIZATION_FAILED”

from kafka import KafkaProducer
from time import sleep
from json import dumps
import logging
import pulumi
import pulumi_kafka as kafka

   producer = KafkaProducer(sasl_mechanism="SCRAM-SHA-512",api_version=(0,11,5),
    sasl_plain_password="secret-password",request_timeout_ms= 500000,max_block_ms=60000,
    sasl_plain_username="secret-username",
    security_protocol="SASL_SSL",
    bootstrap_servers=['b-2xxxxxxxxxx.xxxxx:9198', 'b-3xxxxxxxxx.xxxxx:9198', 'b-1xxxxxxxxxx.xxxxxx:9198'],
                         value_serializer=lambda x: 
                         dumps(x).encode('utf-8'))


test = kafka.Acl("test",
    acl_resource_name="numtest",
    acl_resource_type="Topic",
    acl_principal="User:secret-username",
    acl_host="*",
    acl_operation="All",
    acl_permission_type="Allow")
    

for e in range(500):
    data = {'number' : e}
    producer.send('numtest', value=data)
    sleep(5)

Answer 1

尝试将 sasl_mechanism 设置为 SCRAM-SHA-512。