Amazon ElastiCache
AWS-managed Redis OSS or Valkey — Primary Endpoint, AUTH token, Redis OSS capped at 7.1, VPC-only.
ElastiCache runs Redis OSS-compatible or Valkey engines inside your VPC. Both speak the
same wire protocol — drivers.store.kv stays redis.
The one rule
Copy the Primary Endpoint (cluster mode disabled) from the ElastiCache console — not a replica
reader endpoint. Use rediss:// when encryption in transit is on.
Find credentials (current console)
- AWS Console → ElastiCache → Valkey caches or Redis OSS caches.
- Click the cluster name (not only the radio button).
- On the cluster detail page, copy:
- Primary Endpoint (+ port, usually
6379) for cluster-mode disabled - Configuration Endpoint for cluster-mode enabled (needs a cluster-aware client — oke's single-URL driver expects non-cluster / primary)
- Primary Endpoint (+ port, usually
- Auth: cluster Connectivity / Auth token (or Secrets Manager reference) — set at creation or rotation; there is no “password eye” identical to Redis Cloud.
- Build
REDIS_URLyourself:
# Encryption in transit ON (default on many new clusters)
REDIS_URL=rediss://:AUTH_TOKEN@my-cluster.xxxxx.ng.0001.use1.cache.amazonaws.com:6379
# Transit encryption OFF
# REDIS_URL=redis://:AUTH_TOKEN@my-cluster.xxxxx.ng.0001.use1.cache.amazonaws.com:6379Production guidance
| Topic | Guidance |
|---|---|
| Networking | VPC-only — app must share VPC, peering, or PrivateLink; no public hostname |
| Engine | Redis OSS or Valkey — same redis driver |
| Cluster mode | Prefer disabled + Primary Endpoint for oke's URL-shaped client |
| Transit encryption | When enabled, scheme must be rediss:// |
| AUTH | Set at create/rotate — ElastiCache does not show a Redis-Cloud-style “eye” password |
Reader endpoints exist for read scaling; oke's single REDIS_URL should target the
Primary Endpoint so writes and Gate/Signal counters hit the primary.
Real gotcha — Redis OSS version cap
ElastiCache Redis OSS tops out at 7.1. Versions 7.2+ are Valkey-only. You can in-place upgrade Redis OSS → Valkey 7.2; planning a “Redis 7.2” engine on ElastiCache is a category error — pick Valkey or stay ≤7.1 on Redis OSS.
Troubleshooting
Expected — no public endpoint. Run the app in the VPC (ECS/EKS/EC2) or use a bastion / VPN. Security groups must allow the app SG → cache port.
Token not embedded in REDIS_URL, or still using redis:// against a TLS-required
endpoint. Match scheme to Encryption in-transit, put the token after rediss://:.
Learn more
- Redis (image) · Valkey (image)
- Memorystore — GCP equivalent
- Store · KV