Can I use this MSK Cluster config builder for AWS GovCloud or China regions?

Most of the MSK Cluster primitives behave the same in GovCloud and China partitions, but the ARN partition prefix differs (aws-us-gov, aws-cn) and a handful of services are unavailable. The output is portable in terms of resource shape; you must adjust the partition and verify service availability in the target region before applying.

Can the output of this MSK Cluster config builder be checked into source control safely?

Yes. The output is plain text containing only configuration — no AWS credentials, account IDs (unless you typed them), or secrets are included. Treat it like any other infrastructure-as-code artifact: review in pull requests, gate on validation, apply via your change process.

AWS MSK Cluster Config Builder

MonitoringAWS

Build MSK (Kafka) cluster configurations with broker sizing, authentication, encryption, monitoring, and logging.

Amazon MSK Configuration

Build MSK (Kafka) cluster configurations with broker sizing, authentication, encryption, monitoring, and logging.

Required Fields

ClusterNameKafkaVersionNumberOfBrokerNodesBrokerNodeGroupInfo

{
  "ClusterName": "prod-event-streaming",
  "KafkaVersion": "3.6.0",
  "NumberOfBrokerNodes": 6,
  "BrokerNodeGroupInfo": {
    "InstanceType": "kafka.m5.2xlarge",
    "ClientSubnets": [
      "subnet-0abc123def456789a",
      "subnet-0abc123def456789b",
      "subnet-0abc123def456789c"
    ],
    "SecurityGroups": ["sg-0abc123def456789a"],
    "StorageInfo": {
      "EbsStorageInfo": {
        "VolumeSize": 500,
        "ProvisionedThroughput": {
          "Enabled": true,
          "VolumeThroughput": 250
        }
      }
    },
    "ConnectivityInfo": {
      "PublicAccess": {
        "Type": "DISABLED"
      },
      "VpcConnectivity": {
        "ClientAuthentication": {
          "Sasl": {
            "Iam": {"Enabled": true},
            "Scram": {"Enabled": true}
          },
          "Tls": {"Enabled": true}
        }
      }
    }
  },
  "ClientAuthentication": {
    "Sasl": {
      "Iam": {"Enabled": true},
      "Scram": {"Enabled": true}
    },
    "Tls": {
      "CertificateAuthorityArnList": [
        "arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/abcd1234"
      ],
      "Enabled": true
    }
  },
  "EncryptionInfo": {
    "EncryptionAtRest": {
      "DataVolumeKMSKeyId": "arn:aws:kms:us-east-1:123456789012:key/abcd1234"
    },
    "EncryptionInTransit": {
      "ClientBroker": "TLS",
      "InCluster": true
    }
  },
  "ConfigurationInfo": {
    "Arn": "arn:aws:kafka:us-east-1:123456789012:configuration/prod-config/abcd1234",
    "Revision": 3
  },
  "LoggingInfo": {
    "BrokerLogs": {
      "CloudWatchLogs": {
        "Enabled": true,
        "LogGroup": "/aws/msk/prod-event-streaming"
      },
      "S3": {
        "Enabled": true,
        "Bucket": "msk-broker-logs",
        "Prefix": "logs/prod/"
      }
    }
  },
  "OpenMonitoring": {
    "Prometheus": {
      "JmxExporter": {"EnabledInBroker": true},
      "NodeExporter": {"EnabledInBroker": true}
    }
  },
  "EnhancedMonitoring": "PER_TOPIC_PER_PARTITION",
  "Tags": {
    "Environment": "production",
    "Service": "event-streaming"
  }
}

Generated Output

Output will appear here...

What This Tool Does

Build MSK (Kafka) cluster configurations with broker sizing, authentication, encryption, monitoring, and logging. This tool helps AWS engineers generate valid configurations quickly without consulting documentation, reducing errors and accelerating infrastructure deployment. All processing runs in your browser with no data sent to external servers.

Common Use Cases

1Designing a MSK Cluster configuration for a new AWS workload where the team wants the spec reviewed before any console click happens.
2Pre-flighting a MSK Cluster change against a change-management ticket so the implementation matches what the CAB approved.
3Onboarding a new engineer by giving them a MSK Cluster sandbox they can iterate on without touching live accounts.
4Sketching a MSK Cluster migration from one AWS account to another with the regional and account differences spelled out up front.

Common Questions

Can I use this MSK Cluster config builder for AWS GovCloud or China regions?: Most of the MSK Cluster primitives behave the same in GovCloud and China partitions, but the ARN partition prefix differs (aws-us-gov, aws-cn) and a handful of services are unavailable. The output is portable in terms of resource shape; you must adjust the partition and verify service availability in the target region before applying.
Can the output of this MSK Cluster config builder be checked into source control safely?: Yes. The output is plain text containing only configuration — no AWS credentials, account IDs (unless you typed them), or secrets are included. Treat it like any other infrastructure-as-code artifact: review in pull requests, gate on validation, apply via your change process.

Related Learning Guides

DynamoDB Data Modeling28 min read
Cost Optimization Strategies26 min read

Was this tool helpful?

Disclaimer: This tool runs entirely in your browser. No data is sent to our servers. Always verify outputs before using them in production. AWS, Azure, and GCP are trademarks of their respective owners.

AWS MSK Cluster Config Builder

MonitoringAWS

Build MSK (Kafka) cluster configurations with broker sizing, authentication, encryption, monitoring, and logging.

Amazon MSK Configuration

Build MSK (Kafka) cluster configurations with broker sizing, authentication, encryption, monitoring, and logging.

Required Fields

ClusterNameKafkaVersionNumberOfBrokerNodesBrokerNodeGroupInfo

Generated Output

Output will appear here...

What This Tool Does

Common Use Cases

1Designing a MSK Cluster configuration for a new AWS workload where the team wants the spec reviewed before any console click happens.
2Pre-flighting a MSK Cluster change against a change-management ticket so the implementation matches what the CAB approved.
3Onboarding a new engineer by giving them a MSK Cluster sandbox they can iterate on without touching live accounts.
4Sketching a MSK Cluster migration from one AWS account to another with the regional and account differences spelled out up front.

Common Questions

Can I use this MSK Cluster config builder for AWS GovCloud or China regions?: Most of the MSK Cluster primitives behave the same in GovCloud and China partitions, but the ARN partition prefix differs (aws-us-gov, aws-cn) and a handful of services are unavailable. The output is portable in terms of resource shape; you must adjust the partition and verify service availability in the target region before applying.
Can the output of this MSK Cluster config builder be checked into source control safely?: Yes. The output is plain text containing only configuration — no AWS credentials, account IDs (unless you typed them), or secrets are included. Treat it like any other infrastructure-as-code artifact: review in pull requests, gate on validation, apply via your change process.

Related Learning Guides

DynamoDB Data Modeling28 min read
Cost Optimization Strategies26 min read

Was this tool helpful?