Cache

1# Compliant fixture — MUST pass (POLICY_OK).
2# A single-node Redis aws_elasticache_cluster with transit encryption on.
3# NOTE: at_rest_encryption_enabled is NOT a valid argument on
4# aws_elasticache_cluster (AWS provider schema) — at-rest encryption requires
5# aws_elasticache_replication_group. Only transit_encryption_enabled applies here.
6resource "aws_elasticache_cluster" "good" {
7  cluster_id                 = "good-redis-cluster"
8  engine                     = "redis"
9  node_type                  = "cache.t4g.micro"
10  num_cache_nodes            = 1
11  transit_encryption_enabled = true
12}