More Info:
This rule checks if Amazon ElastiCache Redis replication groups have automatic failover enabled. The rule is NON_COMPLIANT for an ElastiCache replication group if ‘AutomaticFailover’ is not set to ‘enabled’.Risk Level
MediumAddress
ConfigurationCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of Elasticache Automatic Failover not being enabled for AWS ElastiCache using the AWS Management Console, follow these step-by-step instructions:
- Access AWS Management Console: Go to the AWS Management Console at https://aws.amazon.com/ and sign in to your AWS account.
- Navigate to ElastiCache Dashboard: Click on the “Services” dropdown menu at the top left corner of the console and select “ElastiCache” under the “Database” section.
- Select Redis Cluster: In the ElastiCache dashboard, select the Redis cluster for which you want to enable automatic failover.
- Modify the Cluster: Click on the name of the Redis cluster to access its details. In the cluster details page, click on the “Modify” button at the top.
- Enable Automatic Failover: Scroll down to the “Advanced Redis settings” section in the modify cluster settings page. Look for the “Automatic Failover” option and set it to “Enabled”.
- Review and Apply Changes: Review the other settings to ensure they are correct. Once you have confirmed that automatic failover is enabled and other settings are as desired, click on the “Modify” button at the bottom of the page.
- Monitor the Cluster: After modifying the cluster settings, monitor the cluster to ensure that the changes have been successfully applied. You can do this by checking the cluster status in the ElastiCache dashboard.
Using CLI
Using CLI
To remediate the misconfiguration of Elasticache Automatic Failover not being enabled for AWS ElastiCache using AWS CLI, follow these steps:
-
Enable Automatic Failover for ElastiCache Cluster:
Run the following AWS CLI command to modify the ElastiCache cluster to enable automatic failover:
Replace
<your-replication-group-id>with the ID of your ElastiCache replication group. -
Verify Automatic Failover Configuration:
To confirm that the automatic failover has been enabled successfully, describe the ElastiCache replication group using the following command:
Ensure that the
AutomaticFailoverparameter is set toenabledin the output. - Monitor and Test Failover: It is recommended to monitor the ElastiCache cluster after enabling automatic failover to ensure that it functions as expected. You can simulate a failover scenario to test the automatic failover capability.
Using Python
Using Python
To remediate the misconfiguration of Elasticache Automatic Failover not being enabled for AWS Elasticache using Python, you can follow these steps:
-
Install the AWS SDK for Python (Boto3) if you haven’t already. You can install it using pip:
- Use the following Python script to enable Automatic Failover for your Elasticache cluster:
-
Replace
'your-cluster-id'with the actual identifier of your Elasticache cluster. - Run the Python script. It will enable Automatic Failover for the specified Elasticache cluster.