Skip to content

feat: add aws_msk_topic table#1

Merged
karolszmndy merged 3 commits intomainfrom
feat/add-aws-msk-topic-table
Apr 1, 2026
Merged

feat: add aws_msk_topic table#1
karolszmndy merged 3 commits intomainfrom
feat/add-aws-msk-topic-table

Conversation

@karolszmndy
Copy link
Copy Markdown

Summary

  • Add new aws_msk_topic table to query Kafka topics on MSK clusters
  • Uses ListTopics (paginated, with optional topic name prefix filter) and DescribeTopic APIs
  • Upgrade aws-sdk-go-v2/service/kafka from v1.31.2 to v1.49.1 to access topic management APIs
  • Columns: cluster_arn, topic_name, topic_arn, partition_count, replication_factor, out_of_sync_replica_count, status, configs

Test plan

  • Build plugin with make install
  • Run steampipe query ".inspect aws_msk_topic" to verify table registration
  • Query topics on an MSK cluster: select topic_name, partition_count from aws_msk_topic where cluster_arn = '<arn>'
  • Verify Get path: select * from aws_msk_topic where cluster_arn = '<arn>' and topic_name = '<name>'

Add new table to query Kafka topics on MSK clusters via the
ListTopics and DescribeTopic APIs. Upgrade kafka SDK from v1.31.2
to v1.49.1 to access the topic management APIs.
@karolszmndy karolszmndy reopened this Mar 26, 2026
When Steampipe fans out a WHERE cluster_arn = ? query to all configured
connections, each connection attempts kafka-cluster:Connect on the cluster
regardless of account ownership. This causes 403 AccessDeniedException
errors from connections whose account does not own the cluster, because
kafka-cluster:* requires a resource-based policy for cross-account access.

Parse the owning account from the cluster ARN and skip early if the
current connection's account does not match. This mirrors how other
resource types naturally avoid cross-account errors by only returning
resources they own.
…chemas

Replace required cluster_arn key column with ParentHydrate pattern,
enumerating topics across all provisioned MSK clusters automatically.
Removes the cross-account STS identity workaround.
@karolszmndy karolszmndy merged commit 2d3d627 into main Apr 1, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant