Amazon MSK Gets TLS 1.3 Support for Stronger Encryption
Amazon MSK Provisioned clusters now support TLS 1.3 encryption through configurable security policies, giving you faster and more secure data transit without extra costs. You can mix TLS 1.2 and 1.3 connections during migration, or lock down to TLS 1.3 only for stricter compliance—available across all AWS regions where MSK runs.
source: [aws/whats-new]