search

boto / boto3

AWS SDK for Python
https://aws.amazon.com/sdk-for-python/
Apache License 2.0
9.04k stars 1.87k forks source link

Support at-rest and in-transit encryption when creating ElastiCache clusters #1580

Closed paulyhedral closed 6 years ago

paulyhedral commented 6 years ago

The API call to create an ElastiCache cache cluster does not support the options to enable at-rest or in-transit encryption.

ec = boto3.client('elasticache')
ec.create_cache_cluster(
    ...,
    AtRestEncryptionEnabled=True,
    ...)

results in the error: 

botocore.exceptions.ParamValidationError: Parameter validation failed:
Unknown parameter in input: "AtRestEncryptionEnabled", must be one of: CacheClusterId, ReplicationGroupId, AZMode, PreferredAvailabilityZone, PreferredAvailabilityZones, NumCacheNodes, CacheNodeType, Engine, EngineVersion, CacheParameterGroupName, CacheSubnetGroupName, CacheSecurityGroupNames, SecurityGroupIds, Tags, SnapshotArns, SnapshotName, PreferredMaintenanceWindow, Port, NotificationTopicArn, AutoMinorVersionUpgrade, SnapshotRetentionLimit, SnapshotWindow, AuthToken
JordonPhillips commented 6 years ago

This is not available in the service api, so it is not something we can add in boto3. If this is something you want to see, I would recommend asking the service team via their forums or support.

dc-currenxie commented 4 years ago

Since this is coming when I google this... you've got to use Create Replication Group instead of create cluster: https://docs.aws.amazon.com/cli/latest/reference/elasticache/create-replication-group.html