A DynamoDB Cache Encrypted From the Start

DynamoDB Accelerator with TLS and encryption at rest. DAX leaves both off by default, and neither can be turned on for an existing cluster, so a fix means a new cluster. This module also creates its own security group (DAX otherwise uses the VPC default), a service role limited to the named tables and their indexes, and states that writes bypassing DAX leave stale reads until the TTL.

This is the operations reference: version drift, dependants and neighbours. For what the module provisions, its inputs and outputs, and how to buy it, see the catalogue entry.

terraformAWSDatabasesv1.0.0static-validated

Provider drift

This artifact declares no Terraform provider requirements, so there is nothing to drift. Provider freshness applies to Terraform and OpenTofu modules.

What depends on this

No reference architecture names this module, so changing it affects only configurations that reference it directly.

Nearest alternatives

Same cloud, same category. These are what you would weigh against it without changing provider.

A Cassandra Table that Can Be Restored A Database Proxy Where No Client Holds the Password A Graph Database that Has No Password A Migration that Is Not in Clear Text A QuickSight Subscription on Enterprise Through Identity Center, with a VPC Connection A Serverless Collection Reachable from Your VPC with Access Granted by Name A Serverless Valkey Cache That Is Not Open to Its Whole Network A Serverless Warehouse Whose Spend Limit Does More Than Log

The same job on other clouds

In-Memory Cache on other providers. Useful when the cloud is still open, or when you are pricing a second one. How far a comparison like that can be trusted is covered in comparing clouds.

A Cache Cluster with Replicas, Behind an NSGOracle Cloud A DCS Redis Instance Across Two Zones with TLS, a Whitelist and FLUSHALL RenamedHuawei Cloud A Databases for Redis Deployment that Is Private, Encrypted with Your Keys and ProtectedIBM Cloud A Managed Valkey Service on Your Private Network, TLS On, Backed Up, ProtectedUpCloud A Redis Cluster on a Private Network Only, TLS On, Allow-Listed, Three NodesScaleway A TencentDB for Redis Instance with a Replica, a Password, and No Public AddressTencent Cloud An ApsaraDB for Redis Instance with a Replica in a Second Zone, TLS and an Allow-ListAlibaba Cloud Azure Cache for RedisAzure Memorystore Redis/ValkeyGoogle Cloud

Installing it

module "aws_dax_cache" {
  source  = "www.iac-bazaar.com/iac-bazaar/aws-dax-cache/aws"
  version = "1.0.0"
}

A registry token is required for the download itself. Installing through the registry protocol has the two credential steps.