Ensure multi-az is configured for AWS ElastiCache Clusters

MEDIUM

Description

Multi-availability zone architecture can provide redundancy for a more resilient Redis infrastructure. ElastiCache instances can be configured in clusters that cross availability zones. For more information, see the AWS documentation.
References:
https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/AutoFailover.html

Remediation

In AWS Console -

  1. Sign in to the AWS Console and open the ElastiCache console.
  2. Select the Region.
  3. In the navigation pane, choose the engine running on the cluster that you want to modify.
  4. Select Actions and then select Modify.
  5. Change the Multi-AZ setting to enabled.
  6. Select Apply Immediately check box and Click Modify.

In Terraform -

  1. In the aws_elasticache_cluster resource using Memcached, set the az_mode field to cross-az.
  2. Set the num_cache_nodes field to a value greater than 1.

References:
https://docs.aws.amazon.com/AmazonElastiCache/latest/mem-ug/RegionsAndAZs.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticache_cluster#az_mode

Policy Details

Rule Reference ID: AC_AWS_0104
CSP: AWS
Remediation Available: Yes
Domain: Resilience
Resource Category: Database
Resource Type: ElastiCache

Frameworks