AWS036.md

Pattern: Elasticache Replication Group uses unencrypted traffic

Issue: -

Description

Traffic flowing between Elasticache replication nodes should be encrypted to ensure sensitive data is kept private.

Resolution: Enable in transit encryptuon for replication group.

Examples

Example of incorrect code:

resource "aws_elasticache_replication_group" "bad_example" {
        replication_group_id = "foo"
        replication_group_description = "my foo cluster"

        transit_encryption_enabled = false
}

Example of correct code:

resource "aws_elasticache_replication_group" "good_example" {
        replication_group_id = "foo"
        replication_group_description = "my foo cluster"

        transit_encryption_enabled = true
}