steampipe plugin install awssteampipe plugin install aws

Table: aws_elasticache_cluster

A cluster is a collection of one or more cache nodes, all of which run an instance of the Redis cache engine software.

Examples

List clusters that are not encrypted at rest

select
  cache_cluster_id,
  cache_node_type,
  at_rest_encryption_enabled
from
  aws_elasticache_cluster
where
  not at_rest_encryption_enabled;

List clusters whose availability zone count is less than 2

select
  cache_cluster_id,
  preferred_availability_zone
from
  aws_elasticache_cluster
where
  preferred_availability_zone <> 'Multiple';

List clusters that do not enforce encryption in transit

select
  cache_cluster_id,
  cache_node_type,
  transit_encryption_enabled
from
  aws_elasticache_cluster
where
  not transit_encryption_enabled;

List clusters provisioned with undesired (for example, cache.m5.large and cache.m4.4xlarge are desired) node types

select
  cache_node_type,
  count(*) as count
from
  aws_elasticache_cluster
where
  cache_node_type not in ('cache.m5.large', 'cache.m4.4xlarge')
group by
  cache_node_type;

List clusters with inactive notification configuration topics

select
  cache_cluster_id,
  cache_cluster_status,
  notification_configuration ->> 'TopicArn' as topic_arn,
  notification_configuration ->> 'TopicStatus' as topic_status
from
  aws_elasticache_cluster
where
  notification_configuration ->> 'TopicStatus' = 'inactive';

Get security group details for each cluster

select
  cache_cluster_id,
  sg ->> 'SecurityGroupId' as security_group_id,
  sg ->> 'Status' as status
from
  aws_elasticache_cluster,
  jsonb_array_elements(security_groups) as sg;

List clusters with automatic backup disabled

select
  cache_cluster_id,
  cache_node_type,
  cache_cluster_status,
  snapshot_retention_limit
from
  aws_elasticache_cluster
where
  snapshot_retention_limit is null;

Query examples

Control examples

.inspect aws_elasticache_cluster

AWS ElastiCache Cluster

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The ARN (Amazon Resource Name) of the cache cluster.
at_rest_encryption_enabled	boolean	A flag that enables encryption at-rest when set to true.
auth_token_enabled	boolean	A flag that enables using an AuthToken (password) when issuing Redis commands.
auto_minor_version_upgrade	boolean	This parameter is currently disabled.
cache_cluster_create_time	timestamp with time zone	The date and time when the cluster was created.
cache_cluster_id	text	An unique identifier for ElastiCache cluster.
cache_cluster_status	text	The current state of this cluster, one of the following values: available, creating, deleted, deleting, incompatible-network, modifying, rebooting cluster nodes, restore-failed, or snapshotting.
cache_node_type	text	The name of the compute and memory capacity node type for the cluster.
cache_parameter_group	jsonb	Status of the cache parameter group.
cache_subnet_group_name	text	The name of the cache subnet group associated with the cluster.
client_download_landing_page	text	The URL of the web page where you can download the latest ElastiCache client library.
configuration_endpoint	text	Represents a Memcached cluster endpoint which can be used by an application to connect to any node in the cluster.
engine	text	The name of the cache engine (memcached or redis) to be used for this cluster.
engine_version	text	The version of the cache engine that is used in this cluster.
notification_configuration	jsonb	Describes a notification topic and its status.
num_cache_nodes	bigint	The number of cache nodes in the cluster.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
pending_modified_values	jsonb	A group of settings that are applied to the cluster in the future, or that are currently being applied.
preferred_availability_zone	text	The name of the Availability Zone in which the cluster is located or 'Multiple' if the cache nodes are located in different Availability Zones.
preferred_maintenance_window	text	Specifies the weekly time range during which maintenance on the cluster is performed.
region	text	The AWS Region in which the resource is located.
replication_group_id	text	The replication group to which this cluster belongs.
security_groups	jsonb	A list of VPC Security Groups associated with the cluster.
snapshot_retention_limit	bigint	The number of days for which ElastiCache retains automatic cluster snapshots before deleting them.
snapshot_window	text	The daily time range (in UTC) during which ElastiCache begins taking a daily snapshot of your cluster.
tags	jsonb	A map of tags for the resource.
tags_src	jsonb	A list of tags associated with the cluster.
title	text	Title of the resource.
transit_encryption_enabled	boolean	A flag that enables in-transit encryption when set to true.

turbot/aws

Table: aws_elasticache_cluster

Examples

List clusters that are not encrypted at rest

List clusters whose availability zone count is less than 2

List clusters that do not enforce encryption in transit

List clusters provisioned with undesired (for example, cache.m5.large and cache.m4.4xlarge are desired) node types

List clusters with inactive notification configuration topics

Get security group details for each cluster

List clusters with automatic backup disabled

Query examples

Control examples

.inspect aws_elasticache_cluster

Steampipe

Resources

Community