AWS ElastiCache Terraform module
Upstream version 1.11.1
8 controls from PCI DSS v4.0 requirements
Terraform Module Source
pcidss.compliance.tf/terraform-aws-modules/elasticache/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_3653.2.1
Framework requirement
ElastiCache clusters should not use the default subnet group
elasticache_cluster_no_default_subnet_group1.4.4
Framework requirement
ElastiCache Redis clusters should have automatic backups enabled with a retention period of 15 days or greater
elasticache_redis_cluster_automatic_backup_retention_15_days10.3.3
Framework requirement
ElastiCache for Redis replication groups should be encrypted at rest
elasticache_replication_group_encryption_at_rest_enabled3.5.1
Framework requirement
ElastiCache for Redis replication groups should be encrypted with CMK
elasticache_replication_group_encryption_at_rest_enabled_with_kms_cmk3.5.1
Framework requirement
ElastiCache for Redis replication groups should be encrypted in transit
elasticache_replication_group_encryption_in_transit_enabled2.2.7
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled3.5.1
Framework requirement
VPC Security groups should only allow unrestricted incoming traffic for authorized ports
vpc_security_group_allows_ingress_authorized_ports1.3.2
Framework requirement