Control: 2 Minor version upgrades should be automatically applied to ElastiCache for Redis cache clusters
Description
This control evaluates whether ElastiCache for Redis automatically applies minor version upgrades to cache clusters. This control fails if ElastiCache for Redis cache clusters do not have minor version upgrades automatically applied.
AutoMinorVersionUpgrade is a feature that you can turn on in ElastiCache for Redis to have your cache clusters automatically upgraded when a new minor cache engine version is available. These upgrades might include security patches and bug fixes. Staying up-to-date with patch installation is an important step in securing systems.
Remediation
For instructions on turning on automatic minor version upgrades for an existing ElastiCache for Redis cache cluster, see Upgrading engine versions in the Amazon ElastiCache User Guide.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_elasticache_2Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_elasticache_2 --shareSQL
This control uses a named query:
select arn as resource, case when auto_minor_version_upgrade then 'ok' else 'alarm' end as status, case when auto_minor_version_upgrade then title || ' automatic minor version upgrades enabled.' else title || ' automatic minor version upgrades disabled.' end as reason , region, account_idfrom aws_elasticache_cluster;