elasticache-rbac-auth-enabled

Checks if Amazon ElastiCache replication groups have RBAC authentication enabled. The rule is NON_COMPLIANT if the Redis version is 6 or above and ‘UserGroupIds’ is missing, empty, or does not match an entry provided by the 'allowedUserGroupIDs' parameter.

Identifier: ELASTICACHE_RBAC_AUTH_ENABLED

Resource Types: AWS::ElastiCache::ReplicationGroup

Trigger type: Periodic

AWS Region: All supported AWS regions except US ISO West, China (Beijing), Asia Pacific (Jakarta), US ISO East, Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Malaysia), US ISOB East, Asia Pacific (Melbourne), AWS GovCloud (US-East), AWS GovCloud (US-West), Israel (Tel Aviv), Canada West (Calgary), Europe (Spain), China (Ningxia), Europe (Zurich) Region

Parameters:

allowedUserGroupIDs (Optional)

Type: CSV

A comma-separated list of User Group IDs that are approved for ElastiCache replication group access.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.