KIP-567 — Kafka Cluster Audit

Discussion SecurityAdmin

Introduces a structured audit log framework for Kafka that delivers authorization and administrative event notifications to a pluggable audit backend (e.g., a Kafka topic). Kafka has no built-in audit trail, making it impossible to satisfy regulatory compliance requirements (SOC2, GDPR, HIPAA) that mandate a tamper-evident record of who accessed or modified cluster resources.

Details