Connection Guide · Amazon Elasticache · aws/agent-toolkit-for-aws · Skills Docs

Connection Guide · Amazon Elasticache · aws/agent-toolkit-for-aws · Skills Docs

Language	Setting
Python (valkey-py)	`ssl_check_hostname=False` (keep `ssl_cert_reqs="required"`)
Node.js (ioredis)	`tls: { checkServerIdentity: () => undefined }`
Java (Lettuce)	`redisURI.setVerifyPeer(SslVerifyMode.CA)`
Go (go-redis)	`TLSConfig: &tls.Config{InsecureSkipVerify: true, VerifyPeerCertificate: customCACertVerifier}` (use a custom `VerifyPeerCertificate` func to validate the CA chain)
CLI	`valkey-cli --tls --insecure` (note: `--insecure` disables both CA and hostname verification)

from botocore.signers import RequestSigner
from botocore.model import ServiceId
import boto3

def generate_iam_auth_token(cache_name: str, user_id: str, region: str, is_serverless: bool = True) -> str:
    import botocore.session
    session = boto3.Session()
    creds = session.get_credentials().get_frozen_credentials()
    signer = RequestSigner(
        ServiceId("elasticache"), region, "elasticache", "v4",
        creds, botocore.session.get_session().get_component("event_emitter"),
    )
    query = f"Action=connect&User={user_id}"
    if is_serverless:
        query += "&ResourceType=ServerlessCache"
    url = signer.generate_presigned_url(
        {"method": "GET", "url": f"https://{cache_name}/?{query}",
         "body": {}, "headers": {}, "context": {}},
        operation_name="connect", expires_in=900, region_name=region,
    )
    return url[len("https://"):] if url.startswith("https://") else url

token = generate_iam_auth_token(
    "my-cache", "my-iam-user", "us-east-1", is_serverless=True
)
# Pass token as password, user ID as username, ssl=True

Deployment	Primary	Reader
Serverless	`name-xxxxx.serverless.use1.cache.amazonaws.com:6379`	`name-xxxxx.serverless.use1.cache.amazonaws.com:6380`
Node-based (cluster mode)	`name.xxxxx.clustercfg.use1.cache.amazonaws.com:6379` (configuration endpoint)	(cluster-aware clients discover shards via the configuration endpoint; use `CLUSTER SLOTS` or `CLUSTER SHARDS` for shard-aware routing)
Node-based (single shard)	`name.xxxxx.ng.0001.use1.cache.amazonaws.com:6379`	(reader endpoint from `describe-replication-groups`)