ElastiCache Nodes Not Created Across Multi AZ
- Query id: 9b18fc19-7fb8-49b1-8452-9c757c70f926
- Query name: ElastiCache Nodes Not Created Across Multi AZ
- Platform: Pulumi
- Severity: Medium
- Category: Availability
- CWE: 284
- URL: Github
Description¶
ElastiCache Nodes should be created across multi az, which means 'AZMode' should be set to 'cross-az' in multi nodes cluster
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Positive test num. 1 - yaml file
name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
example:
type: aws:elasticache:Cluster
properties:
engine: memcached
numCacheNodes: 2
azMode: single-az
---
name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
example:
type: aws:elasticache:Cluster
properties:
engine: memcached
numCacheNodes: 2
Code samples without security vulnerabilities¶
Negative test num. 1 - yaml file
name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
example:
type: aws:elasticache:Cluster
properties:
engine: memcached
numCacheNodes: 2
azMode: cross-az
---
name: aws-eks
runtime: yaml
description: An EKS cluster
resources:
example:
type: aws:elasticache:Cluster
properties:
engine: memcached
numCacheNodes: 1