Table: aws_elasticache_cluster - Query Amazon ElastiCache Cluster using SQL

The Amazon ElastiCache Cluster is a part of AWS's ElastiCache service that offers fully managed in-memory data store and cache services. This resource is designed to improve the performance of web applications by allowing you to retrieve information from fast, managed, in-memory caches, instead of relying solely on slower disk-based databases. ElastiCache supports two open-source in-memory caching engines: Memcached and Redis.

Table Usage Guide

The aws_elasticache_cluster table in Steampipe provides you with information about each ElastiCache Cluster within your AWS account. This table enables you, as a DevOps engineer, database administrator, or other IT professional, to query cluster-specific details, including configuration, status, and associated metadata. You can utilize this table to gather insights on clusters, such as their availability zones, cache node types, engine versions, and more. The schema outlines the various attributes of the ElastiCache Cluster for you, including the cluster ID, creation date, current status, and associated tags.

Examples

List clusters that are not encrypted at rest

Determine the areas in which data clusters are lacking proper encryption at rest. This is essential for identifying potential security vulnerabilities and ensuring data protection compliance.

select
  cache_cluster_id,
  cache_node_type,
  at_rest_encryption_enabled
from
  aws_elasticache_cluster
where
  not at_rest_encryption_enabled;

select
  cache_cluster_id,
  cache_node_type,
  at_rest_encryption_enabled
from
  aws_elasticache_cluster
where
  at_rest_encryption_enabled = 0;

List clusters whose availability zone count is less than 2

Determine the areas in which your AWS ElastiCache clusters are potentially vulnerable due to having less than two availability zones. This could be useful for improving disaster recovery strategies and ensuring high availability.

select
  cache_cluster_id,
  preferred_availability_zone
from
  aws_elasticache_cluster
where
  preferred_availability_zone <> 'Multiple';

select
  cache_cluster_id,
  preferred_availability_zone
from
  aws_elasticache_cluster
where
  preferred_availability_zone <> 'Multiple';

List clusters that do not enforce encryption in transit

Determine the areas in your system where encryption in transit is not enforced. This is useful for identifying potential security risks and ensuring that all data is properly protected during transmission.

select
  cache_cluster_id,
  cache_node_type,
  transit_encryption_enabled
from
  aws_elasticache_cluster
where
  not transit_encryption_enabled;

select
  cache_cluster_id,
  cache_node_type,
  transit_encryption_enabled
from
  aws_elasticache_cluster
where
  transit_encryption_enabled = 0;

List clusters provisioned with undesired (for example, cache.m5.large and cache.m4.4xlarge are desired) node types

Identify instances where clusters have been provisioned with undesired node types, enabling you to streamline your resources and align with your preferred configurations. This is particularly useful for maintaining consistency and optimizing performance across your infrastructure.

select
  cache_node_type,
  count(*) as count
from
  aws_elasticache_cluster
where
  cache_node_type not in ('cache.m5.large', 'cache.m4.4xlarge')
group by
  cache_node_type;

select
  cache_node_type,
  count(*) as count
from
  aws_elasticache_cluster
where
  cache_node_type not in ('cache.m5.large', 'cache.m4.4xlarge')
group by
  cache_node_type;

List clusters with inactive notification configuration topics

Determine the areas in which clusters have inactive notification configurations to assess the elements within your system that may not be receiving important updates or alerts.

select
  cache_cluster_id,
  cache_cluster_status,
  notification_configuration ->> 'TopicArn' as topic_arn,
  notification_configuration ->> 'TopicStatus' as topic_status
from
  aws_elasticache_cluster
where
  notification_configuration ->> 'TopicStatus' = 'inactive';

select
  cache_cluster_id,
  cache_cluster_status,
  json_extract(notification_configuration, '$.TopicArn') as topic_arn,
  json_extract(notification_configuration, '$.TopicStatus') as topic_status
from
  aws_elasticache_cluster
where
  json_extract(notification_configuration, '$.TopicStatus') = 'inactive';

Get security group details for each cluster

Determine the security status of each cluster by examining the associated security group details. This can help in evaluating the security posture of your clusters and identifying any potential vulnerabilities.

select
  cache_cluster_id,
  sg ->> 'SecurityGroupId' as security_group_id,
  sg ->> 'Status' as status
from
  aws_elasticache_cluster,
  jsonb_array_elements(security_groups) as sg;

select
  cache_cluster_id,
  json_extract(sg.value, '$.SecurityGroupId') as security_group_id,
  json_extract(sg.value, '$.Status') as status
from
  aws_elasticache_cluster,
  json_each(security_groups) as sg;

List clusters with automatic backup disabled

Determine the areas in which automatic backups are disabled for your clusters. This is useful for ensuring data safety and minimizing the risk of data loss.

select
  cache_cluster_id,
  cache_node_type,
  cache_cluster_status,
  snapshot_retention_limit
from
  aws_elasticache_cluster
where
  snapshot_retention_limit is null;

select
  cache_cluster_id,
  cache_node_type,
  cache_cluster_status,
  snapshot_retention_limit
from
  aws_elasticache_cluster
where
  snapshot_retention_limit is null;

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- aws

You can pass the configuration to the command with the --config argument:

steampipe_export_aws --config '<your_config>' aws_elasticache_cluster