Previously supporting SASL/SCRAM and mTLS, MSK Replicator now accepts OAuth 2.0 tokens for data migration and replication from on-premises or cloud-hosted external Kafka clusters. This extension facilitates hybrid and multi-cloud Kafka data architectures with enhanced security and operational simplicity.
By retaining topic names and synchronizing consumer offsets bidirectionally, MSK Replicator enables seamless workload migration and disaster recovery. This feature became available in all Regions with MSK Replicator, easing integration for OAuth/OIDC-enabled Kafka environments.
Source & further reading
MSK Replicator now supports OAuth 2.0 (SASL/OAUTHBEARER) authentication for replication from external Apache Kafka clusters to Amazon MSK ↗Source published 2026-08-24. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.