Security
Learn how to configure authentication, authorization, encryption, listeners, and other security features.
This section does not cover ways you can protect your Redpanda cluster externally; for example, through network ACLs or private networks.
Redpanda supports multiple forms of authentication including SASL/SCRAM, mTLS with principal mapping, and basic authentication.
Redpanda provides two mechanisms for controlling user permissions.
Configure Redpanda to operate in FIPS compliance mode.
Enable encryption with TLS or mTLS.
Use listeners to advertise the location of the broker, so other brokers in the cluster can be found.
For Redpanda Streaming clusters deployed on a public cloud platform, cloud provider IAM roles and managed identities provide a safer alternative to the less secure static credential system, which is based on access keys.
