Redis and ElastiCache Security

Amazon ElastiCache for Redis is a managed caching service. It does not have unique security guidelines; instead, apply authentication, networking, and general AWS security controls.

Authentication

• Enable Redis AUTH to require a password for client connections
• For ElastiCache, use IAM authentication where supported to avoid managing static passwords
• Rotate AUTH tokens regularly
• Never use default or empty passwords

Encryption

In Transit

• Enable TLS encryption for all client-to-cache and replication connections
• For ElastiCache, enable in-transit encryption in the replication group or cluster configuration
• Applications must use TLS-capable Redis client libraries