Data security in Amazon ElastiCache - Amazon ElastiCache (Redis OSS)

Data security in Amazon ElastiCache

To help keep your data secure, Amazon ElastiCache and Amazon EC2 provide mechanisms to guard against unauthorized access of your data on the server.

Amazon ElastiCache (Redis OSS) provides encryption features for data on caches running Redis OSS versions 3.2.6 (scheduled for EOL, see Redis OSS versions end of life schedule), 4.0.10 or later:

  • In-transit encryption encrypts your data whenever it is moving from one place to another, such as between nodes in your cluster or between your cache and your application.

  • At-rest encryption encrypts your on-disk data during sync and backup operations.

Amazon ElastiCache (Redis OSS) also supports authenticating users with either IAM or Redis OSS AUTH, and authorizing user operations using Role-Based Access Control (RBAC).

Image: ElastiCache (Redis OSS) Security Diagram

ElastiCache (Redis OSS) Security Diagram