- Newest
- Most votes
- Most comments
Amazon ElastiCache Serverless for Redis does persist data to disk for durability and high availability purposes. However, this data is encrypted at rest by default, which addresses many security concerns.
ElastiCache Serverless automatically replicates data across multiple Availability Zones (AZs) to ensure data durability and availability. This replication process involves persisting data to disk to maintain consistency and enable quick recovery in case of node failures or AZ outages.
While it's not possible to completely disable disk persistence in ElastiCache Serverless, AWS provides robust security measures to protect your data at rest:
-
Encryption at rest: ElastiCache Serverless automatically encrypts your data at rest using AWS-managed encryption keys. This means that even if someone were to gain unauthorized access to the physical disks, they would not be able to read the data without the encryption keys.
-
Compliance and security standards: ElastiCache is designed to meet various compliance standards and offers features like VPC isolation, IAM authentication, and encryption in transit.
If your security requirements absolutely prohibit any form of disk persistence, you might need to consider alternative solutions or discuss your specific needs with AWS support. However, it's important to note that the persistence mechanisms in ElastiCache Serverless are designed to enhance reliability and durability while maintaining strong security measures through encryption.
Sources
Managed Caching Service Features – Amazon ElastiCache Features – AWS
Managed Caching Service FAQs - Amazon ElastiCache FAQs - AWS
Amazon ElastiCache Serverless for Redis and Memcached is now available | AWS News Blog
Monitor Amazon ElastiCache clusters for at-rest encryption - AWS Prescriptive Guidance
Relevant content
- asked a year ago
- asked 2 years ago
