ElastiCache replication group should have in-transit encryption enabled

What it checks

ElastiCache replication group: in-transit encryption is not enabled.

Where it applies

Terraform: aws_elasticache_replication_group

CloudFormation: AWS::ElastiCache::ReplicationGroup

How to fix it

1. Set transit_encryption_enabled = true. When TLS is enabled, an auth_token is also required.

Frameworks

• AWS FSBP ElastiCache.5
• SOC 2 CC6.7
• PCI-DSS v4.0.1/4.2.1
• HIPAA 164.312(e)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules