How to secure Redis cluster on AWS elasticache

Question

I have been reading up on Redis with AWS Elasticache and am a little confused on security. So far, it seems the only security is to create a Redis Security Group that only allows access from either a specific security group or IP address.

Is there any additional security I can/should add?

Is there any way to attatch Redis access security to IAM Roles?

Redis's primary security model is indeed the firewall. https://redis.io/topics/security — ceejayoz, Mar 09 '17 at 14:54

score 12 · Accepted Answer · answered Mar 09 '17 at 20:42

Currently, Elasticache does not provide authentication mechanisms like, for example, RDS does. The only security available is SecurityGroups, limiting network traffic from specific sources.

Should you require Redis authentication, you will have to deploy Redis on top of EC2 instances and manage it by yourself.

score 8 · Answer 2 · answered Apr 05 '18 at 04:41

You can use Redis AUTH command on Elasticache clusters that have been created with transit-encryption-enabled option.

It is not available in all regions yet but you can read more about using it in the AWS doc: https://docs.aws.amazon.com/AmazonElastiCache/latest/UserGuide/auth.html

How to secure Redis cluster on AWS elasticache

2 Answers2