Token/password generator for ElasticCache with IAM

[kwarunek]

Describe the feature

I would like to have an option in the AWS CLI to generate a token/password for my ElastiCache (redis-compat with IAM auth enabled) cluster based on my current credentials the same way as it works for RDS, EKS and ECR.

Use Case

To connect to ElastiCache's Redis with IAM with a redis-cli. Currently the AWS documentation has a java snippet on how to generate token (there are more on the Internet for node/python etc), but still it requires to have an external tool/scipt to deal with it.

Proposed Solution

Add a subcommand to elasticache like in RDS or ECR to generate token/password for a given cluster

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CLI version used

1.29.21

Environment details (OS name and version, etc.)

Linux

[tim-finnigan]

Hi @kwarunek thanks for reaching out. I'm going to transfer this to our cross-SDK repository for tracking, as it is a feature that would need to be considered across SDKs.

The RDS generate-db-auth-token command for example uses a customization and does not have a corresponding API. And to support your request the AWS CLI and SDKs would likely also need to use a customization. Alternatively the ElastiCache team could potentially build their own library for this use case.

I found an internal backlog item where the ElastiCache and SDK teams have already discussed this request. The SDK teams are not prioritizing the customization at this time due to resource constraints and higher priority projects.

In the meantime others can 👍 this issue to help track demand. I also found a related issue here: aws/aws-sdk-js-v3#6611. We may want to consider consolidating these issues for tracking going forward.

[ErezWeiss]

We are waiting for that also!

[slukes]

Waiting on this too

[Meltr0]

+1 on waiting for this, hoping p2 means it's been put in the que