I have AWS MSK cluster using unauthenticated + SASL/SCRAM authentication hosted in private subnets.
To restrict managing ACLs, i have separated out Zookeeper ENIs to a separate security group and allowed only 1 single machine as ingress where all ACL operations can be done.
Issue: Even after separating zookeeper endpoint, i am still able to do ACL operations using broker/bootstrap endpoint, what could be the possible reasons for same ?
MSK cluster version: 3.3.2
1