Confluent Announces New Data Security and Access Controls, Making Confluent Cloud the Most Secure Approach to Apache Kafka at Scale

With more granular data governance and enterprise-grade security, Confluent Cloud reduces the risk of Kafka breaches and downtime, enabling pervasive event streaming that is easier and more secure

Mountain View, Calif. – October 7, 2020 – Confluent, Inc., the event streaming pioneer, today announced new capabilities in Confluent Cloud that protect event data from threats and vulnerabilities across the entire Apache Kafka® ecosystem. This supports the latest Project Metamorphosis theme – Secure – and ensures the next generation of event streaming applications can be put at the heart of every business while avoiding costly downtime and risk.

The full value of event streaming is unlocked when it’s established as the central platform for event data across an entire business. This widespread use of Kafka makes it even more critical to ensure that the information it processes is properly secured and meets regulatory compliance. But securing Kafka at scale is complex and doing it wrong could cost thousands of dollars per minute in downtime and increases the risk of data breaches. Through Project Metamorphosis, Confluent is adding new capabilities like role-based access control (RBAC), audit logs, customer control of encryption keys, and additional private networking connectivity options to Confluent Cloud to make it even easier to secure sensitive events and harness the full power of cloud-native Kafka.

“Event streaming’s real power lies in connecting all data to create a central nervous system for any real-time business,” said Jay Kreps, co-founder and CEO, Confluent. “However, the more data a platform can access, the more protection is needed to keep that data safe. With this release, Confluent Cloud is the best approach to safeguarding Apache Kafka, removing yet another barrier to pervasive event streaming.”

Confluent Makes Event Streaming Secure by Default

More is required of Kafka as it is implemented in thousands of mission-critical applications. It is used by more than 80% of Fortune 100 companies and across highly regulated industries, like financial services, manufacturing, and healthcare, to harness the power of real-time events for valuable business outcomes and improved customer experiences. Confluent is building the next-generation event streaming platform that any company, no matter what industry, can put at the heart of their business. With these new capabilities and built-in security across the entire Kafka ecosystem, Confluent cuts down the time and effort typically needed to keep Kafka secure and compliant. Now any organization can swiftly make event streaming central to their business.

Protect Data Across the Entire Kafka Ecosystem with Granular Access Controls and Real-Time Monitoring

• Role-based access control (RBAC) – In order to democratize data and event streams across a company, access controls are needed for both users and applications, so it’s clear which individuals can access specific data. RBAC in Confluent Cloud establishes scalable, centralized roles and privilege definitions to not just Kafka, but also Schema Registry, Kafka Connect, and ksqlDB.
• Audit logs – With more individuals in a company using Kafka, it gets harder to keep track of who is attempting to access event data and the actions being taken with Kafka topics. Audit logs provide real-time insights into platform authorization logs and other security events, so action can quickly be taken to deal with any suspicious activity.

Role-based access control and audit logs are available as a preview in Confluent Cloud and generally available in Confluent Platform.

Minimize Risk of Security Breaches with Built-In Provisioning Guardrails That Don’t Slow App Development

• Private networking connectivity – Applications that need access to Kafka are likely spread across many networks. Connecting them all to Confluent Cloud with traditional VPC peering can be challenging and requires a lot of back and forth between teams and between the peering parties. New private networking connectivity reduces the operational burden on teams to set up and maintain platform security and securely transfer data between managed service and clients. Available now for Confluent Cloud Dedicated clusters via AWS PrivateLink in addition to existing support for Amazon Transit Gateway and VPC/Vnet peering on all clouds.
• Encryption with customer managed keys (BYOK) – For government, health, finance, and many other industries that require a greater degree of privacy and data control, ensuring only the appropriate individuals or third parties can access certain data is a must. In order for any company to be able to adopt pervasive event streaming, this new capability enables customers to manage their own encryption keys for at-rest data on Dedicated clusters using their cloud provider's native key management service. It’s now possible to encrypt at-rest cluster data with an AWS-generated encryption key so only the appropriate entity or user can decrypt it.

Data security, compliance, and privacy have always been a top priority across Confluent Cloud and Confluent Platform. To enable any organization to confidently stream events using Kafka, Confluent incorporates multiple layers of logical and physical security controls including in-transit data encryption, access control lists, single sign-on, and more. For our customers who operate in highly regulated industries, Confluent Cloud holds several compliance certifications, including SOC 1, SOC 2, and SOC 3, and meets GDPR, CCPA, and HIPAA readiness standards. See the full list here.

Learn more about these features in Dan Rosanova’s blog post on our latest Project Metamorphosis launch, Secure here.

Additional Resources

• Learn more about Project Metamorphosis: https://www.confluent.io/project-metamorphosis/
• See how Confluent is helping its customers transform their businesses: https://www.confluent.io/customers/
• Learn more about Confluent: https://www.confluent.io/

About Confluent

Confluent, founded by the original creators of Apache Kafka®, pioneered the enterprise-ready event streaming platform. With Confluent, organizations benefit from the first event streaming platform built for the enterprise with the ease of use, scalability, security, and flexibility required by the most discerning global companies to run their business in real time. Companies leading their respective industries have realized success with this new platform paradigm to transform their architectures to streaming from batch processing, spanning on-premises and multi-cloud environments. Confluent is headquartered in Mountain View and London, with offices globally. To learn more, please visit www.confluent.io. Download Confluent Platform and Confluent Cloud at www.confluent.io/download.

The preceding outlines our general product direction and is not a commitment to deliver any material, code, or functionality. The development, release, timing, and pricing of any features or functionality described may change.

Confluent and associated marks are trademarks or registered trademarks of Confluent, Inc.

Apache® and Apache Kafka® are either registered trademarks or trademarks of the Apache Software Foundation in the United States and/or other countries. No endorsement by the Apache Software Foundation is implied by the use of these marks. All other trademarks are the property of their respective owners.