Changelog

AWS IAM Authentication for Amazon MSK Now Generally Available

04.10.2025

Our support for AWS IAM authentication to Amazon MSK is now generally available, allowing users the option of authenticating to their MSK clusters via AWS IAM role assumption rather than through static credentials.

1
-- Create an AWS connection object to AWS referencing your IAM role
2
CREATE CONNECTION aws_msk TO AWS (
3
  -- Replace <account-id> with the 12-digit number that identifies your AWS
4
  -- account, and <role> with the name of the IAM role you want Materialize to
5
  -- assume.
6
  ASSUME ROLE ARN = 'arn:aws:iam::<account-id>:role/<role>'
7
);
8

9
-- Now connect Materialize to Kafka!
10
CREATE CONNECTION kafka_msk TO KAFKA (
11
    BROKER 'msk.mycorp.com:9092',
12
    -- To use IAM authentication, the security protocol must be
13
    -- SASL_PLAINTEXT or SASL_SSL.
14
    SECURITY PROTOCOL = 'SASL_SSL',
15
    AWS CONNECTION = aws_msk
16
);
sql

See our full documentation for how to connect to Amazon MSK with IAM.