Property
Languageterraform
Severitymedium
Serviceelasticache
ProviderAWS
Vulnerability Typeomission

Description#

The Redis cluster is configured without a snapshot retention policy, meaning automatic backups are not enabled. This omission leaves the cluster without point-in-time recovery options in case of data loss or failure.

Impact#

If the Redis cluster experiences data corruption, accidental deletion, or a critical failure, recovery will be difficult or impossible without backups. This can lead to permanent loss of cached data, potential downtime, and disruption to dependent applications or services.

Resolution#

Configure snapshot retention for redis cluster