ElastiCache (Redis OSS) clusters should have automatic backups enabled
Checks that node-based ElastiCache (Redis OSS) cache clusters, and Redis OSS or Valkey replication groups, keep automatic backups for at least 1 day, so the data can be restored into a new cache after a failure. A standalone cache cluster is changed with modify-cache-cluster; a cluster in a replication group is changed on the group.
- service
- ElastiCache
- severity
- High
- scope
- evaluated in every region
How to fix it
In the console
ElastiCache → the cache or replication group → Modify → Backup → Backup retention period
- Enable Automatic Backups
- On
- Backup Retention Period
- 1 day or more; 0 is what turns automatic backups off
- Backup Window
- Any convenient time of day; ElastiCache assigns one if left unset
With the AWS CLI
aws elasticache modify-replication-group --replication-group-id <replication-group-id> --snapshot-retention-limit <retention-days> --region <region>With Terraform
resource "aws_elasticache_replication_group" "this" {
replication_group_id = var.replication_group_id
description = var.description
snapshot_retention_limit = var.snapshot_retention_days
}
See which of your accounts this check is failing on.
Book a live scan