Cluster as code
IaC for Kafka
Cloud-managed Kafka — AWS MSK, Confluent Cloud, Aiven, Strimzi on K8s — is the default for new platforms. Whichever you pick, declare it in code. Drift is where incidents start.
The HCL below provisions an MSK cluster in 3 AZs, KRaft-mode (Kafka 3.7+), with TLS-only client access, broker-AZ-stickiness, and CloudWatch + S3 logging.