AWS ElastiCache sandbox
open-source project, deployed on, and managed by AWS
In-memory key-value NoSql database. An in-memory cache can help improve application performance and user experience.
Scope
AZ scope
Supports Multi-AZ (read replicas)
Supports Auto-scaling (shards)
Features
Async Replication
Enable in-transit encryption TransitEncryptionEnabled:true
Enable at-rest enryption AtRestEncryptionEnabled:true
It can only be enabled at the time of creation, can have some performance impact due to encryption/decryption
Redis
Redis is the most popular option for caching relational database queries.
Authentication
Redis Auth, for self-designed clusters using in-transit encryption only.
Setup during replication group creation by passing the argument --auth-token authtoken
. Token can be changed by using either ROTATE
or SET
.
To set auth on an existing cluster, provide the token, and use --auth-token-update-strategy=ROTATE
.
RBAC has superseeded AUTH for Redis 6.0 onwards.
An access string applied to the user or group provides the least priviledge access. Example string ~objects:* ~items:* ~public:*
More here https://docs.redis.com/latest/rs/security/access-control/rbac/