Kafka v3.12.0, Aug 13 25

Kafka v3.12.0 published on Wednesday, Aug 13, 2025 by Pulumi

kafka.Acl

Explore with Pulumi AI

Kafka v3.12.0 published on Wednesday, Aug 13, 2025 by Pulumi

pulumi/pulumi-kafka

Example Usage

Allow Producer Access to Topic

import * as pulumi from "@pulumi/pulumi";
import * as kafka from "@pulumi/kafka";

const producer = new kafka.Acl("producer", {
    aclResourceName: "orders",
    aclResourceType: "Topic",
    aclPrincipal: "User:producer-service",
    aclHost: "*",
    aclOperation: "Write",
    aclPermissionType: "Allow",
});
// Also grant describe permission for producers
const producerDescribe = new kafka.Acl("producer_describe", {
    aclResourceName: "orders",
    aclResourceType: "Topic",
    aclPrincipal: "User:producer-service",
    aclHost: "*",
    aclOperation: "Describe",
    aclPermissionType: "Allow",
});

import pulumi
import pulumi_kafka as kafka

producer = kafka.Acl("producer",
    acl_resource_name="orders",
    acl_resource_type="Topic",
    acl_principal="User:producer-service",
    acl_host="*",
    acl_operation="Write",
    acl_permission_type="Allow")
# Also grant describe permission for producers
producer_describe = kafka.Acl("producer_describe",
    acl_resource_name="orders",
    acl_resource_type="Topic",
    acl_principal="User:producer-service",
    acl_host="*",
    acl_operation="Describe",
    acl_permission_type="Allow")

package main

import (
	"github.com/pulumi/pulumi-kafka/sdk/v3/go/kafka"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := kafka.NewAcl(ctx, "producer", &kafka.AclArgs{
			AclResourceName:   pulumi.String("orders"),
			AclResourceType:   pulumi.String("Topic"),
			AclPrincipal:      pulumi.String("User:producer-service"),
			AclHost:           pulumi.String("*"),
			AclOperation:      pulumi.String("Write"),
			AclPermissionType: pulumi.String("Allow"),
		})
		if err != nil {
			return err
		}
		// Also grant describe permission for producers
		_, err = kafka.NewAcl(ctx, "producer_describe", &kafka.AclArgs{
			AclResourceName:   pulumi.String("orders"),
			AclResourceType:   pulumi.String("Topic"),
			AclPrincipal:      pulumi.String("User:producer-service"),
			AclHost:           pulumi.String("*"),
			AclOperation:      pulumi.String("Describe"),
			AclPermissionType: pulumi.String("Allow"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Kafka = Pulumi.Kafka;

return await Deployment.RunAsync(() => 
{
    var producer = new Kafka.Acl("producer", new()
    {
        AclResourceName = "orders",
        AclResourceType = "Topic",
        AclPrincipal = "User:producer-service",
        AclHost = "*",
        AclOperation = "Write",
        AclPermissionType = "Allow",
    });

    // Also grant describe permission for producers
    var producerDescribe = new Kafka.Acl("producer_describe", new()
    {
        AclResourceName = "orders",
        AclResourceType = "Topic",
        AclPrincipal = "User:producer-service",
        AclHost = "*",
        AclOperation = "Describe",
        AclPermissionType = "Allow",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.kafka.Acl;
import com.pulumi.kafka.AclArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var producer = new Acl("producer", AclArgs.builder()
            .aclResourceName("orders")
            .aclResourceType("Topic")
            .aclPrincipal("User:producer-service")
            .aclHost("*")
            .aclOperation("Write")
            .aclPermissionType("Allow")
            .build());

        // Also grant describe permission for producers
        var producerDescribe = new Acl("producerDescribe", AclArgs.builder()
            .aclResourceName("orders")
            .aclResourceType("Topic")
            .aclPrincipal("User:producer-service")
            .aclHost("*")
            .aclOperation("Describe")
            .aclPermissionType("Allow")
            .build());

    }
}

resources:
  producer:
    type: kafka:Acl
    properties:
      aclResourceName: orders
      aclResourceType: Topic
      aclPrincipal: User:producer-service
      aclHost: '*'
      aclOperation: Write
      aclPermissionType: Allow
  # Also grant describe permission for producers
  producerDescribe:
    type: kafka:Acl
    name: producer_describe
    properties:
      aclResourceName: orders
      aclResourceType: Topic
      aclPrincipal: User:producer-service
      aclHost: '*'
      aclOperation: Describe
      aclPermissionType: Allow

Allow Consumer Group Access

import * as pulumi from "@pulumi/pulumi";
import * as kafka from "@pulumi/kafka";

// Allow read access to topic
const consumerRead = new kafka.Acl("consumer_read", {
    aclResourceName: "orders",
    aclResourceType: "Topic",
    aclPrincipal: "User:consumer-service",
    aclHost: "*",
    aclOperation: "Read",
    aclPermissionType: "Allow",
});
// Allow access to consumer group
const consumerGroup = new kafka.Acl("consumer_group", {
    aclResourceName: "order-processors",
    aclResourceType: "Group",
    aclPrincipal: "User:consumer-service",
    aclHost: "*",
    aclOperation: "Read",
    aclPermissionType: "Allow",
});

import pulumi
import pulumi_kafka as kafka

# Allow read access to topic
consumer_read = kafka.Acl("consumer_read",
    acl_resource_name="orders",
    acl_resource_type="Topic",
    acl_principal="User:consumer-service",
    acl_host="*",
    acl_operation="Read",
    acl_permission_type="Allow")
# Allow access to consumer group
consumer_group = kafka.Acl("consumer_group",
    acl_resource_name="order-processors",
    acl_resource_type="Group",
    acl_principal="User:consumer-service",
    acl_host="*",
    acl_operation="Read",
    acl_permission_type="Allow")

package main

import (
	"github.com/pulumi/pulumi-kafka/sdk/v3/go/kafka"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Allow read access to topic
		_, err := kafka.NewAcl(ctx, "consumer_read", &kafka.AclArgs{
			AclResourceName:   pulumi.String("orders"),
			AclResourceType:   pulumi.String("Topic"),
			AclPrincipal:      pulumi.String("User:consumer-service"),
			AclHost:           pulumi.String("*"),
			AclOperation:      pulumi.String("Read"),
			AclPermissionType: pulumi.String("Allow"),
		})
		if err != nil {
			return err
		}
		// Allow access to consumer group
		_, err = kafka.NewAcl(ctx, "consumer_group", &kafka.AclArgs{
			AclResourceName:   pulumi.String("order-processors"),
			AclResourceType:   pulumi.String("Group"),
			AclPrincipal:      pulumi.String("User:consumer-service"),
			AclHost:           pulumi.String("*"),
			AclOperation:      pulumi.String("Read"),
			AclPermissionType: pulumi.String("Allow"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Kafka = Pulumi.Kafka;

return await Deployment.RunAsync(() => 
{
    // Allow read access to topic
    var consumerRead = new Kafka.Acl("consumer_read", new()
    {
        AclResourceName = "orders",
        AclResourceType = "Topic",
        AclPrincipal = "User:consumer-service",
        AclHost = "*",
        AclOperation = "Read",
        AclPermissionType = "Allow",
    });

    // Allow access to consumer group
    var consumerGroup = new Kafka.Acl("consumer_group", new()
    {
        AclResourceName = "order-processors",
        AclResourceType = "Group",
        AclPrincipal = "User:consumer-service",
        AclHost = "*",
        AclOperation = "Read",
        AclPermissionType = "Allow",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.kafka.Acl;
import com.pulumi.kafka.AclArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Allow read access to topic
        var consumerRead = new Acl("consumerRead", AclArgs.builder()
            .aclResourceName("orders")
            .aclResourceType("Topic")
            .aclPrincipal("User:consumer-service")
            .aclHost("*")
            .aclOperation("Read")
            .aclPermissionType("Allow")
            .build());

        // Allow access to consumer group
        var consumerGroup = new Acl("consumerGroup", AclArgs.builder()
            .aclResourceName("order-processors")
            .aclResourceType("Group")
            .aclPrincipal("User:consumer-service")
            .aclHost("*")
            .aclOperation("Read")
            .aclPermissionType("Allow")
            .build());

    }
}

resources:
  # Allow read access to topic
  consumerRead:
    type: kafka:Acl
    name: consumer_read
    properties:
      aclResourceName: orders
      aclResourceType: Topic
      aclPrincipal: User:consumer-service
      aclHost: '*'
      aclOperation: Read
      aclPermissionType: Allow
  # Allow access to consumer group
  consumerGroup:
    type: kafka:Acl
    name: consumer_group
    properties:
      aclResourceName: order-processors
      aclResourceType: Group
      aclPrincipal: User:consumer-service
      aclHost: '*'
      aclOperation: Read
      aclPermissionType: Allow

Prefix-Based Access Control

import * as pulumi from "@pulumi/pulumi";
import * as kafka from "@pulumi/kafka";

// Grant access to all topics with prefix "logs-"
const logsAccess = new kafka.Acl("logs_access", {
    aclResourceName: "logs-",
    aclResourceType: "Topic",
    resourcePatternTypeFilter: "Prefixed",
    aclPrincipal: "User:log-aggregator",
    aclHost: "*",
    aclOperation: "Read",
    aclPermissionType: "Allow",
});

import pulumi
import pulumi_kafka as kafka

# Grant access to all topics with prefix "logs-"
logs_access = kafka.Acl("logs_access",
    acl_resource_name="logs-",
    acl_resource_type="Topic",
    resource_pattern_type_filter="Prefixed",
    acl_principal="User:log-aggregator",
    acl_host="*",
    acl_operation="Read",
    acl_permission_type="Allow")

package main

import (
	"github.com/pulumi/pulumi-kafka/sdk/v3/go/kafka"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Grant access to all topics with prefix "logs-"
		_, err := kafka.NewAcl(ctx, "logs_access", &kafka.AclArgs{
			AclResourceName:           pulumi.String("logs-"),
			AclResourceType:           pulumi.String("Topic"),
			ResourcePatternTypeFilter: pulumi.String("Prefixed"),
			AclPrincipal:              pulumi.String("User:log-aggregator"),
			AclHost:                   pulumi.String("*"),
			AclOperation:              pulumi.String("Read"),
			AclPermissionType:         pulumi.String("Allow"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Kafka = Pulumi.Kafka;

return await Deployment.RunAsync(() => 
{
    // Grant access to all topics with prefix "logs-"
    var logsAccess = new Kafka.Acl("logs_access", new()
    {
        AclResourceName = "logs-",
        AclResourceType = "Topic",
        ResourcePatternTypeFilter = "Prefixed",
        AclPrincipal = "User:log-aggregator",
        AclHost = "*",
        AclOperation = "Read",
        AclPermissionType = "Allow",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.kafka.Acl;
import com.pulumi.kafka.AclArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Grant access to all topics with prefix "logs-"
        var logsAccess = new Acl("logsAccess", AclArgs.builder()
            .aclResourceName("logs-")
            .aclResourceType("Topic")
            .resourcePatternTypeFilter("Prefixed")
            .aclPrincipal("User:log-aggregator")
            .aclHost("*")
            .aclOperation("Read")
            .aclPermissionType("Allow")
            .build());

    }
}

resources:
  # Grant access to all topics with prefix "logs-"
  logsAccess:
    type: kafka:Acl
    name: logs_access
    properties:
      aclResourceName: logs-
      aclResourceType: Topic
      resourcePatternTypeFilter: Prefixed
      aclPrincipal: User:log-aggregator
      aclHost: '*'
      aclOperation: Read
      aclPermissionType: Allow

Admin User with Full Access

import * as pulumi from "@pulumi/pulumi";
import * as kafka from "@pulumi/kafka";

// Grant cluster-level admin access
const adminCluster = new kafka.Acl("admin_cluster", {
    aclResourceName: "kafka-cluster",
    aclResourceType: "Cluster",
    aclPrincipal: "User:admin",
    aclHost: "*",
    aclOperation: "All",
    aclPermissionType: "Allow",
});

import pulumi
import pulumi_kafka as kafka

# Grant cluster-level admin access
admin_cluster = kafka.Acl("admin_cluster",
    acl_resource_name="kafka-cluster",
    acl_resource_type="Cluster",
    acl_principal="User:admin",
    acl_host="*",
    acl_operation="All",
    acl_permission_type="Allow")

package main

import (
	"github.com/pulumi/pulumi-kafka/sdk/v3/go/kafka"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Grant cluster-level admin access
		_, err := kafka.NewAcl(ctx, "admin_cluster", &kafka.AclArgs{
			AclResourceName:   pulumi.String("kafka-cluster"),
			AclResourceType:   pulumi.String("Cluster"),
			AclPrincipal:      pulumi.String("User:admin"),
			AclHost:           pulumi.String("*"),
			AclOperation:      pulumi.String("All"),
			AclPermissionType: pulumi.String("Allow"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Kafka = Pulumi.Kafka;

return await Deployment.RunAsync(() => 
{
    // Grant cluster-level admin access
    var adminCluster = new Kafka.Acl("admin_cluster", new()
    {
        AclResourceName = "kafka-cluster",
        AclResourceType = "Cluster",
        AclPrincipal = "User:admin",
        AclHost = "*",
        AclOperation = "All",
        AclPermissionType = "Allow",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.kafka.Acl;
import com.pulumi.kafka.AclArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Grant cluster-level admin access
        var adminCluster = new Acl("adminCluster", AclArgs.builder()
            .aclResourceName("kafka-cluster")
            .aclResourceType("Cluster")
            .aclPrincipal("User:admin")
            .aclHost("*")
            .aclOperation("All")
            .aclPermissionType("Allow")
            .build());

    }
}

resources:
  # Grant cluster-level admin access
  adminCluster:
    type: kafka:Acl
    name: admin_cluster
    properties:
      aclResourceName: kafka-cluster
      aclResourceType: Cluster
      aclPrincipal: User:admin
      aclHost: '*'
      aclOperation: All
      aclPermissionType: Allow

Common ACL Patterns

Producer ACLs

Producers typically need:

Write and Describe on topics
Write on TransactionalID (for transactional producers)
IdempotentWrite on Cluster (for idempotent producers)

Consumer ACLs

Consumers typically need:

Read on topics
Read on consumer groups
Describe on topics (optional, for metadata)

Admin ACLs

Administrators typically need:

All on Cluster
Or specific operations like Alter, AlterConfigs, Create, Delete

Warning: Be cautious with Deny ACLs as they take precedence over Allow ACLs. A deny rule will block access even if an allow rule exists.

Create Acl Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Acl(name: string, args: AclArgs, opts?: CustomResourceOptions);

@overload
def Acl(resource_name: str,
        args: AclArgs,
        opts: Optional[ResourceOptions] = None)

@overload
def Acl(resource_name: str,
        opts: Optional[ResourceOptions] = None,
        acl_host: Optional[str] = None,
        acl_operation: Optional[str] = None,
        acl_permission_type: Optional[str] = None,
        acl_principal: Optional[str] = None,
        acl_resource_name: Optional[str] = None,
        acl_resource_type: Optional[str] = None,
        resource_pattern_type_filter: Optional[str] = None)

func NewAcl(ctx *Context, name string, args AclArgs, opts ...ResourceOption) (*Acl, error)

public Acl(string name, AclArgs args, CustomResourceOptions? opts = null)

public Acl(String name, AclArgs args)
public Acl(String name, AclArgs args, CustomResourceOptions options)

type: kafka:Acl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args AclArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args AclArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args AclArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args AclArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args AclArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var aclResource = new Kafka.Acl("aclResource", new()
{
    AclHost = "string",
    AclOperation = "string",
    AclPermissionType = "string",
    AclPrincipal = "string",
    AclResourceName = "string",
    AclResourceType = "string",
    ResourcePatternTypeFilter = "string",
});

example, err := kafka.NewAcl(ctx, "aclResource", &kafka.AclArgs{
	AclHost:                   pulumi.String("string"),
	AclOperation:              pulumi.String("string"),
	AclPermissionType:         pulumi.String("string"),
	AclPrincipal:              pulumi.String("string"),
	AclResourceName:           pulumi.String("string"),
	AclResourceType:           pulumi.String("string"),
	ResourcePatternTypeFilter: pulumi.String("string"),
})

var aclResource = new Acl("aclResource", AclArgs.builder()
    .aclHost("string")
    .aclOperation("string")
    .aclPermissionType("string")
    .aclPrincipal("string")
    .aclResourceName("string")
    .aclResourceType("string")
    .resourcePatternTypeFilter("string")
    .build());

acl_resource = kafka.Acl("aclResource",
    acl_host="string",
    acl_operation="string",
    acl_permission_type="string",
    acl_principal="string",
    acl_resource_name="string",
    acl_resource_type="string",
    resource_pattern_type_filter="string")

const aclResource = new kafka.Acl("aclResource", {
    aclHost: "string",
    aclOperation: "string",
    aclPermissionType: "string",
    aclPrincipal: "string",
    aclResourceName: "string",
    aclResourceType: "string",
    resourcePatternTypeFilter: "string",
});

type: kafka:Acl
properties:
    aclHost: string
    aclOperation: string
    aclPermissionType: string
    aclPrincipal: string
    aclResourceName: string
    aclResourceType: string
    resourcePatternTypeFilter: string

Acl Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Acl resource accepts the following input properties:

AclHost string
AclOperation string
AclPermissionType string
AclPrincipal string
AclResourceName string: The name of the resource
AclResourceType string
ResourcePatternTypeFilter string

AclHost string
AclOperation string
AclPermissionType string
AclPrincipal string
AclResourceName string: The name of the resource
AclResourceType string
ResourcePatternTypeFilter string

aclHost String
aclOperation String
aclPermissionType String
aclPrincipal String
aclResourceName String: The name of the resource
aclResourceType String
resourcePatternTypeFilter String

aclHost string
aclOperation string
aclPermissionType string
aclPrincipal string
aclResourceName string: The name of the resource
aclResourceType string
resourcePatternTypeFilter string

acl_host str
acl_operation str
acl_permission_type str
acl_principal str
acl_resource_name str: The name of the resource
acl_resource_type str
resource_pattern_type_filter str

aclHost String
aclOperation String
aclPermissionType String
aclPrincipal String
aclResourceName String: The name of the resource
aclResourceType String
resourcePatternTypeFilter String

Outputs

All input properties are implicitly available as output properties. Additionally, the Acl resource produces the following output properties:

Id string: The provider-assigned unique ID for this managed resource.

Id string: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

id string: The provider-assigned unique ID for this managed resource.

id str: The provider-assigned unique ID for this managed resource.

id String: The provider-assigned unique ID for this managed resource.

Look up Existing Acl Resource

Get an existing Acl resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AclState, opts?: CustomResourceOptions): Acl

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        acl_host: Optional[str] = None,
        acl_operation: Optional[str] = None,
        acl_permission_type: Optional[str] = None,
        acl_principal: Optional[str] = None,
        acl_resource_name: Optional[str] = None,
        acl_resource_type: Optional[str] = None,
        resource_pattern_type_filter: Optional[str] = None) -> Acl

func GetAcl(ctx *Context, name string, id IDInput, state *AclState, opts ...ResourceOption) (*Acl, error)

public static Acl Get(string name, Input<string> id, AclState? state, CustomResourceOptions? opts = null)

public static Acl get(String name, Output<String> id, AclState state, CustomResourceOptions options)

resources:  _:    type: kafka:Acl    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

AclHost string
AclOperation string
AclPermissionType string
AclPrincipal string
AclResourceName string: The name of the resource
AclResourceType string
ResourcePatternTypeFilter string

AclHost string
AclOperation string
AclPermissionType string
AclPrincipal string
AclResourceName string: The name of the resource
AclResourceType string
ResourcePatternTypeFilter string

aclHost String
aclOperation String
aclPermissionType String
aclPrincipal String
aclResourceName String: The name of the resource
aclResourceType String
resourcePatternTypeFilter String

aclHost string
aclOperation string
aclPermissionType string
aclPrincipal string
aclResourceName string: The name of the resource
aclResourceType string
resourcePatternTypeFilter string

acl_host str
acl_operation str
acl_permission_type str
acl_principal str
acl_resource_name str: The name of the resource
acl_resource_type str
resource_pattern_type_filter str

aclHost String
aclOperation String
aclPermissionType String
aclPrincipal String
aclResourceName String: The name of the resource
aclResourceType String
resourcePatternTypeFilter String

Import

Kafka ACLs can be imported using a pipe-delimited string containing all ACL properties:

Format: ${acl_principal}|${acl_host}|${acl_operation}|${acl_permission_type}|${resource_type}|${resource_name}|${resource_pattern_type_filter}

$ pulumi import kafka:index/acl:Acl example 'User:producer|*|Write|Allow|Topic|orders|Literal'

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Kafka pulumi/pulumi-kafka
License: Apache-2.0
Notes: This Pulumi package is based on the kafka Terraform Provider.

Kafka v3.12.0 published on Wednesday, Aug 13, 2025 by Pulumi

pulumi/pulumi-kafka

kafka.Acl

On this page

On this page

Example Usage

Allow Producer Access to Topic

Allow Consumer Group Access

Prefix-Based Access Control

Admin User with Full Access

Common ACL Patterns

Producer ACLs

Consumer ACLs

Admin ACLs

Create Acl Resource

Constructor syntax

Parameters

Constructor example

Acl Resource Properties

Inputs

Outputs

Look up Existing Acl Resource

Import

Package Details

On this page

On this page