- Adds Authorizer Log Delivery for provisioned MSK clusters (Standard & Express) at no extra cost
- Captures denied authorization requests with client IP and API, routing logs to CloudWatch Logs, S3, or Firehose
- Enabled via console or CLI for new and existing clusters; available in all MSK regions except the EU sovereign cloud