steampipe plugin install awssteampipe plugin install aws

Table: aws_elasticache_replication_group

A Redis replication group is a collection of cache clusters, where one of the clusters is a primary read-write cluster and the others are read-only replicas.

Examples

Basic info

select
  replication_group_id,
  description,
  cache_node_type,
  cluster_enabled,
  auth_token_enabled,
  automatic_failover
from
  aws_elasticache_replication_group;

List replication groups that are not encrypted at rest

select
  replication_group_id,
  cache_node_type,
  at_rest_encryption_enabled
from
  aws_elasticache_replication_group
where
  not at_rest_encryption_enabled;

List replication groups with multi-AZ disabled

select
  replication_group_id,
  cache_node_type,
  multi_az
from
  aws_elasticache_replication_group
where
  multi_az = 'disabled';

List replication groups whose backup retention period is less than 30 days

select
  replication_group_id,
  snapshot_retention_limit,
  snapshot_window,
  snapshotting_cluster_id
from
  aws_elasticache_replication_group
where
  snapshot_retention_limit < 30;

List replication groups by node type

select
  cache_node_type,
  count (*)
from
  aws_elasticache_replication_group
group by
  cache_node_type;

List member clusters for each replication group

select
  replication_group_id,
  jsonb_array_elements_text(member_clusters) as member_clusters
from
  aws_elasticache_replication_group;

Query examples

Control examples

.inspect aws_elasticache_replication_group

AWS ElastiCache Replication Group

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The ARN (Amazon Resource Name) of the replication group.
at_rest_encryption_enabled	boolean	A flag that enables encryption at-rest when set to true.
auth_token_enabled	boolean	A flag that enables using an AuthToken (password) when issuing Redis commands.
auth_token_last_modified_date	timestamp with time zone	The date when the auth token was last modified.
automatic_failover	text	Indicates the status of automatic failover for this Redis replication group.
cache_node_type	text	The name of the compute and memory capacity node type for each node in the replication group.
cluster_enabled	boolean	A flag indicating whether or not this replication group is cluster enabled.
configuration_endpoint	jsonb	The configuration endpoint for this replication group.
description	text	The user supplied description of the replication group.
global_replication_group_info	jsonb	The name of the Global Datastore and role of this replication group in the Global Datastore.
kms_key_id	text	The ID of the KMS key used to encrypt the disk in the cluster.
member_clusters	jsonb	The names of all the cache clusters that are part of this replication group.
member_clusters_outpost_arns	jsonb	The outpost ARNs of the replication group's member clusters.
multi_az	text	A flag indicating if you have Multi-AZ enabled to enhance fault tolerance.
node_groups	jsonb	A list of node groups in this replication group.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
pending_modified_values	jsonb	A group of settings to be applied to the replication group, either immediately or during the next maintenance window.
region	text	The AWS Region in which the resource is located.
replication_group_id	text	The identifier for the replication group.
snapshot_retention_limit	bigint	The number of days for which ElastiCache retains automatic cluster snapshots before deleting them.
snapshot_window	text	The daily time range (in UTC) during which ElastiCache begins taking a daily snapshot of your node group (shard).
snapshotting_cluster_id	text	The cluster ID that is used as the daily snapshot source for the replication group.
status	text	The current state of this replication group - creating, available, modifying, deleting, create-failed, snapshotting.
title	text	Title of the resource.
transit_encryption_enabled	boolean	A flag that enables in-transit encryption when set to true.
user_group_ids	jsonb	The list of user group IDs that have access to the replication group.

turbot/aws