ElastiCache should use in-transit encryption
- GG_ID: GG_IAC_0048
- Severity: HIGH
- Complexity: HIGH
- Categories: DATA, NETWORK, PERMISSION
- Providers: AWS
- Potential data exposure: True
- Visible in logs: False
- User interaction required: False
- Privileges required: True
Amazon ElastiCache for Redis is a web service that makes it easy to set up, manage, and scale a distributed in-memory data store or cache environment in the cloud. It provides a high-performance and scalable caching solution.
ElastiCache in-transit encryption is a tool used to help protect data when it is moving from one location to another.
Not encrypting data in-transit could lead to data leak in case of an attack.
Enable in-transit encryption when creating an ElastiCache for Redis replication group. Note that this will recreate the ElastiCache replication group and could lead to data loss. If losing this data is not acceptable, backups should be used. See https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/in-transit-encryption.html for more details