AWS ElastiCache Redis cluster is not configured with automatic backup

Description

Amazon ElastiCache clusters running Redis can back up their data. Using automated backup, you can restore a cluster or seed a new cluster. The backup consists of the cluster's metadata, along with all of the data in the cluster. You can enable or disable automatic backups on an existing Redis cluster or replication group by modifying it using the ElastiCache console, the AWS CLI, or the ElastiCache API. For any Redis cluster, you can enable automatic backups. When automatic backups are enabled, ElastiCache creates a backup of the cluster on a daily basis. There is no impact on the cluster and the change is immediate.

Code Example

resource "aws_elasticache_cluster" "example" {
  ...
+ snapshot_retention_limit = 5
}

Remediation

Terraform

• Resource: aws_elasticache_cluster
• Arguments: snapshot_retention_limit

Rule Details

Field	Value
ID	IAC-0184
Severity	INFO
IaC Type	Terraform
Frameworks	Terraform, TerraformPlan
Checkov ID	CKV_AWS_134

References

• Checkov Rule

---