AWS ElastiCache Parameter Group

aws_elasticache_parameter_group (Terraform)

The Parameter Group in ElastiCache can be configured in Terraform with the resource name aws_elasticache_parameter_group. The following sections describe 3 examples of how to use the resource and its parameters.

Example Usage from GitHub

anantha199456/elastic-cache-challenge

resource "aws_elasticache_parameter_group" "default" {
  name   = "cache-params"
  family = "redis3.2"

awsautomation/kongUAT

resource "aws_elasticache_parameter_group" "kong" {
  name   = format("%s-%s", var.service, var.environment)
  family = var.redis_family

  description = var.description
}

LKHetzel/tftest

resource "aws_elasticache_parameter_group" "memcached" {
  name = "memcache-parameter-group"
  family = "memcached1.6"

Parameters

• description optional - string
• family required - string
• id optional computed - string
• name required - string
• parameter set block
  • name required - string
  • value required - string

Explanation in Terraform Registry

Provides an ElastiCache parameter group resource.

NOTE: Attempting to remove the reserved-memory parameter when family is set to redis2.6 or redis2.8 may show a perpetual difference in Terraform due to an Elasticache API limitation. Leave that parameter configured with any value to workaround the issue.

Tips: Best Practices for The Other AWS ElastiCache Resources

In addition to the aws_elasticache_cluster, AWS ElastiCache has the other resources that should be configured for security reasons. Please check some examples of those resources and precautions.

aws_elasticache_cluster

Ensure to enable backup retention of Elasitcache

It's better to take snapshots of Redis clusters to improve data availability.

aws_elasticache_replication_group

Ensure to enable in-transit encryption of ElastiCache

It's better to enable in-transit encryption of ElastiCahe. If the ElastiCache replication group uses unencrypted traffic, it is vulnerable to meet-in-the-middle (MITM) attacks.