Confluent Cloud Security

1. 21-authenticating-users-and-applications
2. 22-authorizing-using-rbac-and-acls
3. 23-understanding-encryption
4. 24-auditing-and-monitoring
5. 25-maintaining-compliance-and-privacy
6. ip-filtering

Documentation Outline

Manage Security

• Overview
• Manage Authentication
  • Overview
  • Manage User Identities
    • Overview
    • Manage User Accounts
      • Overview
      • Authentication Security Protections
      • Manage Local User Accounts
      • Multi-factor Authentication
      • Manage SSO User Accounts
    • Manage User Identity Providers
      • Overview
      • Use Single Sign-On (SSO)
      • Manage SAML Single Sign-On (SSO)
      • Manage Azure Marketplace SSO
      • Just-in-time User Provisioning
      • Group Mapping
        • Overview
        • Enable Group Mapping
        • Manage Group Mappings
        • Troubleshooting
        • Best Practices
      • Manage Trusted Domains
      • Manage SSO provider
      • Troubleshoot SSO
  • Manage Workload Identities
    • Overview
    • Manage Workload Identities
    • Manage Service Accounts and API Keys
      • Overview
      • Create Service Accounts
      • Manage Service Accounts
      • Manage API Keys
        • Overview
        • Manage API keys
        • Best Practices
        • Troubleshoot
    • Manage OAuth/OIDC Identity Providers
      • Overview
      • Add an OIDC Identity Provider
      • Use OAuth Identity Pools and Filters
      • Manage Identity Provider Configurations
      • Manage the JWKS URI
      • Configure OAuth Clients
        • Overview
        • Go Clients
        • Java Clients
        • JavaScript Clients
        • .NET Clients
        • Python Clients
        • Configuration Reference
        • Configure UAMI
      • Access Kafka REST APIs
      • Use Confluent STS Tokens with REST APIs
      • Best Practices
      • Troubleshoot OAuth Issues
    • Manage mTLS Identity Providers
      • Overview
      • Configure mTLS
      • Manage Certificate Authorities
      • Manage Certificate Identity Pools
      • Create CEL Filters for mTLS
      • Create JSON payloads for mTLS
      • Manage Certificate Revocation
      • Troubleshoot mTLS Issues
• Control Access
  • Overview
  • Resource Hierarchy
    • Overview
    • Organizations
      • Overview
      • Manage Multiple Organizations
    • Environments
    • Confluent Resource Names (CRNs)
  • Manage Role-Based Access Control
    • Overview
    • Predefined RBAC Roles
    • Manage Role Bindings
    • Use ACLs with RBAC
  • Manage IP Filtering
    • Overview
    • Manage IP Groups
    • Manage IP Filters
    • Best Practices
  • Manage Access Control Lists
    • Overview
    • Operations
    • Examples
    • Troubleshoot
    • Reference
  • Use the Confluent CLI with multiple credentials on Confluent Cloud
• Encrypt and Protect Data
  • Overview
  • Manage Data in Transit With TLS
  • Encrypt Using Self-Managed Encryption Keys
    • Overview
    • Use Self-Managed Encryption Keys on AWS
    • Use Self-Managed Encryption Keys on Azure
    • Use Self-Managed Encryption Keys on Google Cloud
    • Manage Key Policies
    • Use Self-Managed Encryption Keys with Tableflow
    • Use Pre-BYOK-API-V1 Self-Managed Encryption Keys
    • Use Confluent CLI for Self-Managed Encryption Keys
    • Use BYOK API for Self-Managed Encryption Keys
    • Revoke Access to Data at Rest
    • Best Practices
    • Troubleshoot Key Policy Issues
  • Encrypt Using Client-Side Field Level Encryption
    • Overview
    • Manage CSFLE using Confluent Cloud Console
    • Use Client-side Field Level Encryption
    • Configuration Settings
    • Manage Encryption Keys
    • Quick Start
    • Implement a Custom KMS Driver
    • Process Encrypted Data with Apache Flink
    • Code examples
    • Troubleshoot
    • FAQ
  • Encrypt Using Client-Side Payload Encryption
• Monitor Activity
  • Concepts
  • Audit Log Event Categories
  • Understand Audit Log Records
  • Audit Log Event Schema
  • Auditable Event Methods
    • Access Transparency
    • Connector
    • Custom Connector Plugin
    • Flink
    • Flink Authentication and Authorization
    • IP Filter Authorization
    • Kafka Cluster Authentication and Authorization
    • Kafka Cluster Management and Operations
    • ksqlDB Cluster Authentication and Authorization
    • Networking
    • Notifications Service
    • OAuth/OIDC Identity Provider and Identity Pool
    • Organization
    • Role-based Access Control (RBAC)
    • Schema Registry Authentication and Authorization
    • Schema Registry Management and Operations
    • Tableflow Data Plane
    • Tableflow Control Plane
  • Access and Consume Audit Log Records
  • Access Transparency
  • Retain Audit Logs
  • Best Practices
  • Troubleshoot
• Access Management Tutorial

Links

• Course: Introduction to Confluent Cloud Security
• Confluent Cloud Security | Secure Apache Kafka® with Confluent - YouTube
• Secure Data Streams with Confluent Cloud's Security Controls
• Building-Trust-With-Confluent-Cloud-WP.pdf
• Kafka Security 101 | Secure and Maintain Your Apache Kafka® Systems - YouTube
• Automatically Secure Kafka Clusters
• Manage security in Confluent Platform | Confluent Documentation