When using Kafka ACLs, when is the resource authorization checked?

Kafka performs an authorization check every time a client attempts to access a resource (topics, consumer groups, etc.), ensuring real-time enforcement of security policies.

From Kafka documentation:

“Kafka checks authorization for every operation, every time the resource is accessed.”

This behavior ensures that any changes to ACLs are applied immediately and consistently.

Page Reference:

Kafka: The Definitive Guide, 1st Edition, Chapter 9, p. 284

Apache Kafka Documentation: “Kafka Security - Authorization”

‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾‾