Skip to content

enable-backup-retention

Explanation

Redis clusters should have a snapshot retention time to ensure that they are backed up and can be restored if required.

Possible Impact

Without backups of the redis cluster recovery is made difficult

Suggested Resolution

Configure snapshot retention for redis cluster

Insecure Example

The following example will fail the AVD-AWS-0050 check.

---
Resources:
  BadExample:
    Type: AWS::ElastiCache::CacheCluster
    Properties:
      AZMode: cross-az
      CacheNodeType: cache.m3.medium
      Engine: redis
      NumCacheNodes: '3'
      PreferredAvailabilityZones:
        - us-west-2a
        - us-west-2a
        - us-west-2b

Secure Example

The following example will pass the AVD-AWS-0050 check.

---
Resources:
  GoodExample:
    Type: AWS::ElastiCache::CacheCluster
    Properties:
      AZMode: cross-az
      CacheNodeType: cache.m3.medium
      Engine: redis
      NumCacheNodes: '3'
      SnapshotRetentionLimit: 7
      PreferredAvailabilityZones:
        - us-west-2a
        - us-west-2a
        - us-west-2b