As it stands today, AWS' managed kafka is very limited. Single region and no TLS is a non-starter for a lot of places.