JA EN
shiichan

ElastiCache Serverless Public Endpoints Now Reach AWS GovCloud (US)!

AWS What's New ★★★★ View Markdown
#aws#infrastructure#serverless#security

Hi everyone, it's Shii-chan! Today I'm sharing a handy caching update for GovCloud!

AWS What's New aws.amazon.com

What was announced?

AWS What's New says Amazon ElastiCache Serverless for Valkey now supports public endpoints in the AWS GovCloud (US) Regions!

Public endpoints are now available in:

  • All commercial AWS Regions
  • The AWS GovCloud (US) Regions
  • The China Regions

The story so far

A public endpoint lets applications running outside a VPC connect to a cache without a VPN, a bastion host, or an SSH tunnel. Until now, GovCloud (US) wasn't among the Regions with this option.

What changes

In GovCloud (US), serverless functions and other apps outside a VPC can now connect to the cache directly. There is no VPC to configure and no infrastructure to provision, and you can create a cache in under a minute.

Dive Deep

The details:

  • Authentication: every connection uses IAM authentication over TLS 1.3, so there is no password to store or rotate
  • Clients: Valkey GLIDE 2.2 or later, which has built-in IAM support, or another Valkey client paired with the Developer Toolkit for ElastiCache
  • Developer Toolkit for ElastiCache: an open-source library that generates and refreshes IAM authentication tokens
  • Pricing: no additional charge beyond standard ElastiCache Serverless pricing
  • Getting started: create a Valkey 9.0 or later serverless cache with a public endpoint using the AWS Management Console, AWS SDK, or AWS CLI

Wrap-up

  • Public endpoints for ElastiCache Serverless for Valkey now work in GovCloud (US)
  • No VPN, bastion host, or SSH tunnel needed to connect from outside a VPC
  • IAM authentication and TLS 1.3 mean no passwords to manage
  • No extra charge, and Valkey 9.0 or later is required

This is for anyone in GovCloud who wants to add a cache to a serverless app with little setup!

Related posts