AWS CloudFormation
User Guide (Version )

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.


The AWS::ElastiCache::SecurityGroupIngress type authorizes ingress to a cache security group from hosts in specified Amazon EC2 security groups. For more information about ElastiCache security group ingress, go to AuthorizeCacheSecurityGroupIngress in the Amazon ElastiCache API Reference Guide.


Updates are not supported.


To declare this entity in your AWS CloudFormation template, use the following syntax:


{ "Type" : "AWS::ElastiCache::SecurityGroupIngress", "Properties" : { "CacheSecurityGroupName" : String, "EC2SecurityGroupName" : String, "EC2SecurityGroupOwnerId" : String } }


Type: AWS::ElastiCache::SecurityGroupIngress Properties: CacheSecurityGroupName: String EC2SecurityGroupName: String EC2SecurityGroupOwnerId: String



The name of the Cache Security Group to authorize.

Required: Yes

Type: String

Update requires: No interruption


Name of the EC2 Security Group to include in the authorization.

Required: Yes

Type: String

Update requires: No interruption


Specifies the AWS Account ID of the owner of the EC2 security group specified in the EC2SecurityGroupName property. The AWS access key ID is not an acceptable value.

Required: No

Type: String

Update requires: No interruption

Return Values


When the logical ID of this resource is provided to the Ref intrinsic function, Ref returns the resource name.

For more information about using the Ref function, see Ref.