Cache

1# Intentionally-bad Heroku-shaped output: Redis plan -> ElastiCache WITHOUT encryption,
2# and the ALB forwards plaintext HTTP instead of redirecting. MUST POLICY_FAIL.
3# (Test data only — never deployed.)
4
5resource "aws_elasticache_replication_group" "redis" {
6  replication_group_id       = "${var.project_name}-redis"
7  description                = "Heroku Redis -> ElastiCache"
8  node_type                  = var.cache_node_type
9  at_rest_encryption_enabled = false
10}
11
12resource "aws_lb" "web" {
13  name               = "${var.project_name}-web"
14  load_balancer_type = "application"
15}
16
17resource "aws_lb_listener" "http_forward" {
18  load_balancer_arn = aws_lb.web.arn
19  port              = 80
20  protocol          = "HTTP"
21
22  default_action {
23    type             = "forward"
24    target_group_arn = aws_lb_target_group.web.arn
25  }
26}