Use Access Control Lists (ACLs) for Analytics with Kafka

Objective

Apache Kafka is an open-source, distributed event streaming platform designed for real-time, large-scale data processing with high scalability, durability, and low latency.

This guide explains how to configure Access Control Lists (ACLs) via the OVHcloud Control Panel.

Requirements

• Access to the OVHcloud Control Panel
• A Public Cloud project in your OVHcloud account
• A Kafka cluster running on OVHcloud Public Cloud accepting incoming connections with at least one topic

Instructions

Configure ACLs on topics

Kafka supports access control lists (ACLs) to manage permissions on topics. This approach allows you to limit the operations that are available to specific connections and to restrict access to certain data sets, which improves the security of your data.

By default the admin user has access to all topics with admin privileges. You can define some additional ACLs for all users / topics, by clicking on the Add an ACL button from the ACL tab:

For a particular user, and one topic (or all with '*'), define the ACL with the following permissions:

• admin: full access to APIs and topic
• read: allow only searching and retrieving data from a topic
• write: allow updating, adding, and deleting data from a topic
• readwrite: full access to the topic

Note: Write permission allows the service user to create new indexes that match the pattern, but it does not allow deletion of those indexes.

When multiple rules match, they are applied in the order listed above. If no rules match, access is denied.

We want your feedback!

We would love to help answer questions and appreciate any feedback you may have.

If you need training or technical assistance to implement our solutions, contact your sales representative or click on this link to get a quote and ask our Professional Services experts for a custom analysis of your project.

Are you on Discord? Connect to our channel at https://discord.gg/ovhcloud and interact directly with the team that builds our Analytics service!

Join our community of users.