Where are Apache Kafka Access Control Lists stored?
A.
Broker
B.
ZooKeeper
C.
Schema Registry
D.
Connect
The Answer Is:
B
This question includes an explanation.
Explanation:
Apache Kafka's built-in ACL mechanism (SimpleAclAuthorizer) stores ACL data in ZooKeeper. ACLs are propagated to brokers from ZooKeeper and cached in memory for fast lookup.
From Kafka documentation:
“ACLs are stored in ZooKeeper under /kafka-acl and are loaded into each broker at startup and on updates.”
B → Correct: ZooKeeper stores ACLs centrally.
A → Brokers load ACLs but don’t persist them.
C & D → Do not store or manage ACLs.
Page Reference:
Kafka: The Definitive Guide, 1st Edition, Chapter 9, p. 285