Description

Detects AWS ElastiCache Redis clusters that do not have transit encryption enabled, which means data transmitted between the client and the cache nodes is not encrypted in transit. This poses a security risk as sensitive data could be exposed to unauthorized parties through network traffic interception.

Detection Strategy

• Redis clusters in AWS ElastiCache are scanned to check their encryption configuration

• A vulnerability is reported when a Redis cluster has TransitEncryptionEnabled set to false

• Only Redis engine clusters are evaluated - other engines like Memcached are excluded from the check