// This assembly is included in the following assemblies:
//
// configuring/configuring.adoc

[id='assembly-securing-access-{context}']
= Managing secure access to Kafka

[role="_abstract"]
Secure your Kafka cluster by managing the access a client has to Kafka brokers.
Specify configuration options to secure Kafka brokers and clients

A secure connection between Kafka brokers and clients can encompass the following:

* Encryption for data exchange
* Authentication to prove identity
* Authorization to allow or decline actions executed by users

The authentication and authorization mechanisms specified for a client must match those specified for the Kafka brokers.
Strimzi operators automate the configuration process and create the certificates required for authentication.
The Cluster Operator automatically sets up TLS certificates for data encryption and authentication within your cluster.

//Config options for securing Kafka
include::assembly-securing-kafka-brokers.adoc[leveloffset=+1]

//Config options for clients
include::assembly-securing-kafka-clients.adoc[leveloffset=+1]

//Config to secure access
include::assembly-securing-kafka.adoc[leveloffset=+1]

//oauth options
include::../oauth/assembly-oauth-authentication.adoc[leveloffset=+1]
include::../oauth/assembly-oauth-authorization.adoc[leveloffset=+1]
