automatically update ElasticCache security group with new ElasticBeanstalk environment

Thanks Peter, This helps a lot. After reading your references I settled on using the example here.

However, I don't know how to get the redis endpoint URL I need to connect from my app. I expect I need to use a Fn::GetAtt for ConfigurationEndpoin.Address in the config file but how do I then make that visible to my app? I currently set a REDIS_URL environment variable with the URL of the redis cluster I created manually.

I've pieced together a way to get the redis URL that works but I'm not entirely comfortable with it. First I pull the MyElastiCache reference in setup.config by using:

      AWS_REDIS_NODE = '`{ "Ref" : "MyElastiCache" }`'

In my application I can then build my URL like this:

        redis_url = 'redis://' + app.config.get('AWS_REDIS_NODE') + '.qihti6.0001.use1.cache.amazonaws.com:6379'

I'm not sure I can rely on the last part of the string concat. Is there a better way to get the endpoint?

Use what you mentioned previously for AWS_REDIS_NODE but combine with Sub. EG in yaml.

!Sub "redis://${MyElastiCache.ConfigurationEndpoint.Address}:${${MyElastiCache.ConfigurationEndpoint.Port}"

Thanks again Peter, This got me looking in the right direction. I had to use RedisEndpoint because cluster mode is disabled for my setup. There was an extra "${" typo in your response. I ended up with this statement in my setup.config:

REDIS_URL = '`{ "Fn::Sub": "redis://${MyElastiCache.RedisEndpoint.Address}:${MyElastiCache.RedisEndpoint.Port}" }`'

and I now use:

        redis_url = app.config.get('REDIS_URL')

in my app. Everything works fine now.