# ElastiCache Serverless Public Endpoints Now Reach AWS GovCloud (US)!

Hi everyone, it's Shii-chan! Today I'm sharing a handy caching update for GovCloud!

## What was announced?

AWS What's New says Amazon ElastiCache Serverless for Valkey now supports public endpoints in the AWS GovCloud (US) Regions!

Public endpoints are now available in:

- All commercial AWS Regions
- The AWS GovCloud (US) Regions
- The China Regions

## The story so far

A public endpoint lets applications running outside a VPC connect to a cache without a VPN, a bastion host, or an SSH tunnel. Until now, GovCloud (US) wasn't among the Regions with this option.

## What changes

In GovCloud (US), serverless functions and other apps outside a VPC can now connect to the cache directly. There is no VPC to configure and no infrastructure to provision, and you can create a cache in under a minute.

## Dive Deep

The details:

- Authentication: every connection uses IAM authentication over TLS 1.3, so there is no password to store or rotate
- Clients: Valkey GLIDE 2.2 or later, which has built-in IAM support, or another Valkey client paired with the Developer Toolkit for ElastiCache
- Developer Toolkit for ElastiCache: an open-source library that generates and refreshes IAM authentication tokens
- Pricing: no additional charge beyond standard ElastiCache Serverless pricing
- Getting started: create a Valkey 9.0 or later serverless cache with a public endpoint using the AWS Management Console, AWS SDK, or AWS CLI

## Wrap-up

- Public endpoints for ElastiCache Serverless for Valkey now work in GovCloud (US)
- No VPN, bastion host, or SSH tunnel needed to connect from outside a VPC
- IAM authentication and TLS 1.3 mean no passwords to manage
- No extra charge, and Valkey 9.0 or later is required

This is for anyone in GovCloud who wants to add a cache to a serverless app with little setup!