Enable tls for existing ElasticCache

0

I'm planning to enable TLS and data at rest encryption for my ElasticCache 6.0.5 cluster with consistent data .

  • Remove sg rule to block new connection to elasticache for consistency
  • Create backup
  • Restore from backup

Is there any other approach for enabling tls ?

nav
preguntada hace 5 meses208 visualizaciones
1 Respuesta
1

Hello.

Are you using Redis?
In the case of Redis, if it is version 7 or later, it seems possible to change the settings and enable it even in an existing cluster.
For versions earlier than 7, I think you need to enable it when creating a cluster from a snapshot using the steps you described.
https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/in-transit-encryption.html

Modifying the in-transit encryption setting, for an existing cluster, is supported on replication groups running Redis version 7 and later.

profile picture
EXPERTO
respondido hace 5 meses
  • I tried it in my environment. The image below is Redis 6.0.5. It cannot be changed for Redis 6.0.5. a
    The image below is Redis 7.1.0. In the case of Redis 7.1.0, editing is also possible on existing clusters. b

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas