(aws-msk-alpha): (add vpc connectivity interface to msk-alpha construct)

[fridgerator]

Describe the feature

VPC Connectivity exists as a part of the L1 CfnCluster construct, however these props are not exposed to aws-msk-alpha Cluster. This feature would add an interface for the Vpc Connectivity props, to be passed down to the underlying CfnCluster.

Use Case

The current solution is to create a new MSK Cluster then use a custom resource to make api calls that enable VPC Connectivity , which can take a long time. It would be beneficial if a cluster could be created with this already enabled via the aws-msk-alpha construct.

Proposed Solution

No response

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.90.0

Environment details (OS name and version, etc.)

Mac OS Ventura, Typescript

[peterwoodworth]

Thanks for the report, makes sense 👍🏻

Note that you can use escape hatches to make use of these L1 properties without our explicit support

[fridgerator]

Actually this may not be supported.

I tried:

const cluster = new msk.Cluster...
const cfnCluster = cluster.node.defaultChild as CfnCluster;
cfnCluster.addOverride("Properties.BrokerNodeGroupInfo.ConnectivityInfo.VpcConnectivity.ClientAuthentication.Sasl.Iam.Enabled", true)
cfnCluster.addOverride("Properties.BrokerNodeGroupInfo.ConnectivityInfo.VpcConnectivity.ClientAuthentication.Tls.Enabled", true)

And when I deployed I got a 400 error:

When creating a cluster, all vpcConnectivity auth schemes must be disabled ('enabled' : false). You can enable auth schemes after the cluster is created. (Service: Kafka, Status Code: 400, Request ID: xxxx) 'vpcConnectivity.clientAuthentication'" (RequestToken: xxxx, HandlerErrorCode: InvalidRequest)

[peterwoodworth]

Hmm you may want to reach out to the CloudFormation coverage roadmap in that case

[github-actions]

This issue has not received a response in a while. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.

[khaleqi]

It would be great if anyone could share working solution for this issue.