MSK - Error: kafka server: failed to create one or more ACL rules

[Constantin07]

I'm trying to add the second principal with Admin permissions to AWS MSK cluster.

The principal which I'm using already has Admin privileges.

resource "kafka_acl" "admin2_cluster_alter" {
  resource_name       = "kafka-cluster"
  resource_type       = "Cluster"
  acl_principal       = "CN=Admin,OU=IT Department,O=Some Org,L=Location,ST=England,C=GB"
  acl_operation       = "Alter"
  acl_permission_type = "Allow"
  acl_host            = "*"
}

PS: The principal matches 100% certificate distinguished name.

Plan runs fine but when applied I'm getting:

kafka_acl.admin2_cluster_alter: Creating...

Error: kafka server: failed to create one or more ACL rules: kafka server: This most likely occurs because of a request being malformed by the client library or the message was sent to an incompatible broker. See the broker logs for more details

  with kafka_acl.admin2_cluster_alter,
  on admin.tf line 10, in resource "kafka_acl" "admin2_cluster_alter":
  10: resource "kafka_acl" "admin2_cluster_alter" {

Getting the same error for other Cluster Operations.

Has anyone come across this issue before ?

[Constantin07]

UPDATE: The root cause was missing User: in front of principal value.