Enable tls for existing ElasticCache

0

I'm planning to enable TLS and data at rest encryption for my ElasticCache 6.0.5 cluster with consistent data .

  • Remove sg rule to block new connection to elasticache for consistency
  • Create backup
  • Restore from backup

Is there any other approach for enabling tls ?

nav
已提问 5 个月前208 查看次数
1 回答
1

Hello.

Are you using Redis?
In the case of Redis, if it is version 7 or later, it seems possible to change the settings and enable it even in an existing cluster.
For versions earlier than 7, I think you need to enable it when creating a cluster from a snapshot using the steps you described.
https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/in-transit-encryption.html

Modifying the in-transit encryption setting, for an existing cluster, is supported on replication groups running Redis version 7 and later.

profile picture
专家
已回答 5 个月前
  • I tried it in my environment. The image below is Redis 6.0.5. It cannot be changed for Redis 6.0.5. a
    The image below is Redis 7.1.0. In the case of Redis 7.1.0, editing is also possible on existing clusters. b

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则