TLS 1.3 provides stronger security and faster performance for data in transit in MSK Provisioned clusters. Support is delivered through selectable encryption policies that define allowed TLS versions and cipher suites, enabling customers to control their security posture.
Policies can allow negotiation of TLS 1.2 or 1.3, facilitating smooth client upgrades, or enforce stricter TLS 1.3-only connections for compliance. This capability is globally available with no extra charge and prepares customers for post-quantum cryptography requirements by supporting more secure encryption protocols.
Source & further reading
Amazon MSK now supports TLS 1.3 for data in transit ↗Source published 2026-10-30. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.