Question: where are the acls stored in a kafka cluster by default?
Answer: Please note that using the default provided SimpleAclAuthorizer , your ACL are stored in Zookeeper. Therefore, it is important to secure Zookeeper and make sure only your Kafka brokers are allowed to write to Zookeeper ( zookeeper.