Skip to content

feat(lambda-event-sources): adds AuthenticationMethod.CLIENT_CERTIFICATE_TLS_AUTH to kafka#17920

Merged
mergify[bot] merged 5 commits intoaws:masterfrom
oieduardorabelo:master
Jan 10, 2022
Merged

feat(lambda-event-sources): adds AuthenticationMethod.CLIENT_CERTIFICATE_TLS_AUTH to kafka#17920
mergify[bot] merged 5 commits intoaws:masterfrom
oieduardorabelo:master

Conversation

@oieduardorabelo
Copy link
Copy Markdown
Contributor

@oieduardorabelo oieduardorabelo commented Dec 9, 2021

This PR adds a new enum value, CLIENT_CERTIFICATE_TLS_AUTH, to SelfManagedKafkaEventSource.

Docs.


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

@gitpod-io
Copy link
Copy Markdown

gitpod-io bot commented Dec 9, 2021

Copy link
Copy Markdown
Contributor

@kaizencc kaizencc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for submitting the contribution @oieduardorabelo! Minor comment below. LGTM!

authType = lambda.SourceAccessConfigurationType.BASIC_AUTH;
break;
case AuthenticationMethod.CLIENT_CERTIFICATE_TLS_AUTH:
authType = lambda.SourceAccessConfigurationType.of(AuthenticationMethod.CLIENT_CERTIFICATE_TLS_AUTH);
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can you add this as a static method to lambda.SourceAccessConfigurationType also? Not sure why there's this duplicate between AuthenticationMethod and lambda.SourceAccessConfigurationType but there's nothing we can do about it now.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@kaizen3031593 I have updated the PR with the new static method. Thank you for reviewing it 💪

@mergify mergify bot dismissed kaizencc’s stale review January 5, 2022 01:08

Pull request has been modified.

Copy link
Copy Markdown
Contributor

@kaizencc kaizencc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One more minor thing :)

public static readonly SASL_SCRAM_512_AUTH = new SourceAccessConfigurationType('SASL_SCRAM_512_AUTH');

/**
* The Secrets Manager ARN of your secret key containing the certificate chain (X.509 PEM), private key (PKCS#8 PEM), and private key password (optional) used for mutual TLS authentication of your MSK/Apache Kafka brokers.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Last thing -- sorry I would do this myself but I don't think I can change code in your PR since you are developing on master... next time, if you dev on a branch, I should have default permissions to go in and change things if necessary.

What I would like to see here is to have this broken up into two lines for readability. As soon as you do it, I'll approve!

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oh thanks for the tip around branches, I'll keep that in mind 👍 new line on the comment was added in last commit

@kaizencc kaizencc added the pr-linter/exempt-readme The PR linter will not require README changes label Jan 7, 2022
@mergify mergify bot dismissed kaizencc’s stale review January 7, 2022 23:39

Pull request has been modified.

Copy link
Copy Markdown
Contributor

@kaizencc kaizencc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🥳 thanks for the contribution!

@kaizencc kaizencc changed the title feat(lambda-event-sources): kafka: support CLIENT_CERTIFICATE_TLS_AUTH feat(lambda-event-sources): adds AuthenticationMethod.CLIENT_CERTIFICATE_TLS_AUTH to kafka Jan 10, 2022
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Jan 10, 2022

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation
Copy link
Copy Markdown
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildProject89A8053A-LhjRyN9kxr8o
  • Commit ID: bc39665
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

@mergify mergify bot merged commit 93cd776 into aws:master Jan 10, 2022
@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Jan 10, 2022

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@dinuka-kmart
Copy link
Copy Markdown

dinuka-kmart commented Feb 4, 2022

Hi @oieduardorabelo,

Thanks for implementing this.

Is it possible to add SERVER_ROOT_CA_CERTIFICATE to SourceAccessConfigurationType as well please in python CDK?

Thanks

@KmartCodify
Copy link
Copy Markdown

Hi There AWS team (@oieduardorabelo / @kaizen3031593 ),
Are there any plans to implement this or confirm this is available via CDK using Python? Any future targeted CDK release version info that you can share would be appreciated!
Thanks for your response!
Regards,

TikiTDO pushed a commit to TikiTDO/aws-cdk that referenced this pull request Feb 21, 2022
…CATE_TLS_AUTH` to kafka (aws#17920)

This PR adds a new enum value, `CLIENT_CERTIFICATE_TLS_AUTH`, to `SelfManagedKafkaEventSource`.

[Docs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-eventsourcemapping-sourceaccessconfiguration.html).

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

@aws-cdk/aws-lambda-event-sources pr-linter/exempt-readme The PR linter will not require README changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants