5

I have been reading up on Redis with AWS Elasticache and am a little confused on security. So far, it seems the only security is to create a Redis Security Group that only allows access from either a specific security group or IP address.

Is there any additional security I can/should add?

Is there any way to attatch Redis access security to IAM Roles?

Improve this question
1

3 Answers 3

Reset to default
12

Currently, Elasticache does not provide authentication mechanisms like, for example, RDS does. The only security available is SecurityGroups, limiting network traffic from specific sources.

Should you require Redis authentication, you will have to deploy Redis on top of EC2 instances and manage it by yourself.

Improve this answer
8

You can use Redis AUTH command on Elasticache clusters that have been created with transit-encryption-enabled option.

It is not available in all regions yet but you can read more about using it in the AWS doc: https://docs.aws.amazon.com/AmazonElastiCache/latest/UserGuide/auth.html

Improve this answer
0

You can now use IAM Authentication for your ElastiCacheRedis clusters https://aws.amazon.com/about-aws/whats-new/2022/11/amazon-elasticache-supports-iam-authentication-redis-clusters/

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .