Amazon ElastiCache for Redis is now FedRAMP authorized; available in AWS GovCloud (US)



Amazon Web Services announced this week that its Amazon ElastiCache for Redis is now FedRAMP authorized with a Provisional Authority to Operate (P-ATO) at the High Impact Level provided by the Joint Authorization Board (JAB). There is no additional charge for FedRAMP-compliant ElastiCache for Redis.

United States government customers and their partners can now use the latest version of ElastiCache for Redis to process and store their FedRAMP systems, data, and mission-critical, high-impact workloads in the AWS GovCloud (US) Region, and at moderate impact level in AWS US East/West Regions.

Amazon ElastiCache is a web service that makes it easy to set up, manage, and scale distributed in-memory cache environments in the AWS Cloud. It provides a high performance, resizable, and cost-effective in-memory cache, while removing the complexity associated with deploying and managing a distributed cache environment. ElastiCache works with both the Redis and Memcached engines.

Amazon ElastiCache for Redis is fast in-memory data store that provides sub-millisecond latency to power internet-scale real-time applications. Built on open-source Redis and compatible with the Redis APIs, ElastiCache for Redis works with your Redis clients and uses the open Redis data format to store data. Consumers can self-managed Redis applications can work seamlessly with ElastiCache for Redis without any code changes.

ElastiCache for Redis combines the speed, simplicity, and versatility of open-source Redis with manageability, security, and scalability from Amazon to power demanding real-time applications in gaming, ad-tech, eCommerce, healthcare, financial services, and IoT.

Amazon ElastiCache for Redis supports Redis cluster mode and provides high availability via support for automatic failover by detecting the primary node failure and promoting the replica to be the primary with minimal impact. It allows for read availability for application by supporting read replicas (across availability zones), to enable the reads to be served when the primary is busy with the increased workload.

ElastiCache for Redis supports enhanced failover logic to allow for automatic failover in cases when majority of the primary nodes for Redis cluster mode are unavailable.

ElastiCache for Redis is a Redis-compatible, fully managed, in-memory data store and caching service that delivers sub-millisecond response times and supports millions of requests per second. ElastiCache for Redis supports popular use cases such as database and application caching, session management, queues, publish/subscribe, and real-time analytics. Now consumers can use the speed, simplicity, security, and scalability of FedRAMP-authorized ElastiCache for Redis to deliver secure, high-performance, and scalable apps containing sensitive and critical workloads.

Amazon ElastiCache for Redis supports Amazon VPC, so that users can isolate cluster to the IP ranges they choose for the nodes. Also, ElastiCache team continuously monitors for known security vulnerabilities in open-source Redis, operating system, and firmware, and promptly applies the security-related patches to keep Redis environment secure. It is PCI compliant, HIPAA eligible, FedRAMP authorized, and offers encryption in transit, at rest, and Redis AUTH for secure internode communications to help keep sensitive data such as personally identifiable information (PII) safe.

FedRAMP-authorized ElastiCache for Redis requires Redis engine version 4.0.10 or higher. ElastiCache for Redis 4.0.10 or higher provides the controls needed to create FedRAMP-compliant clusters such as FIPS-endpoints. Users can enable Transport Layer Security (TLS) to encrypt all communication between clients and Redis servers as well as between the Redis servers (primary and read replica nodes).

Additionally, the encryption at-rest feature can enable to encrypt backups on disk and in Amazon S3 and the Redis AUTH command can be used for an added level of authentication.

 

Leave a Reply

WWPI – Covering the best in IT since 1980