# AWS adds optional TLS 1.3 policies to MSK Provisioned clusters

_Published Friday, October 30, 2026 at 4:15 PM EDT · Security · Latest · Tier 2 — Notable_

AWS says Amazon MSK Provisioned customers can now enable TLS 1.3, a protocol that encrypts data in transit, through named security policies. The capability is available at no additional cost in every AWS Region offering MSK Provisioned.

Customers can choose policies accepting both TLS 1.2 and TLS 1.3 while upgrading clients, or require TLS 1.3 exclusively. Clusters reject connections that fail the selected policy's requirements. Existing clusters remain unchanged until customers apply a policy.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/10/amazon-msk-tls/)

---
Canonical: https://techandbusiness.org/newswire/obuvAIB0A3KCOfJdnQhjFM
Published: 2026-10-30T20:15:08.798Z
Story chronology: 2026-10-30T17:00:00.000Z
Retrieved: 2026-10-30T23:10:56.169Z
Publisher: Tech & Business (techandbusiness.org)