Authentication and authorization options for Amazon MQ for RabbitMQ

This article explores authentication and authorization options for Amazon MQ for RabbitMQ, helping organizations align message broker security with their existing identity infrastructure.

• Simple credentials: Username/password for development and small-scale deployments
• OAuth 2.0: Short-lived bearer tokens from external identity providers
• IAM authentication: AWS STS-issued JWTs for credential-free, IAM-native access control
• LDAP: Integration with Active Directory or existing directory services
• HTTP-based auth backend: Custom authentication logic via external HTTPS server
• SSL certificate authentication: Passwordless identity extraction from X.509 certificates
• Mutual TLS: Certificate verification combined with username/password authentication

Organizations can eliminate operational overhead of managing static credentials by choosing the authentication method that matches their identity infrastructure, whether IAM, Active Directory, third-party providers, or PKI-based systems.