https://ferkakta.dev/tags/redis/Recent content in Redis on ferkakta.devHugoen-USCopyright fizz.Fri, 13 Feb 2026 09:00:00 -0600https://ferkakta.dev/elasticache-auth-token-to-rbac-migration/Fri, 13 Feb 2026 09:00:00 -0600https://ferkakta.dev/elasticache-auth-token-to-rbac-migration/<p>Needed to migrate a shared ElastiCache Redis cluster from a single auth token to per-user RBAC. Breaking change — every service on the cluster goes dark if you get the sequencing wrong.</p> <h2 id="the-terraform-provider-bug">The Terraform provider bug</h2> <p>Step one: don&rsquo;t touch the real cluster. Built a throwaway copy and ran the migration there first.</p> <p>Good thing — the Terraform AWS provider has a bug in the auth-token removal step. It tells you the auth token was removed. Updates its state file. The plan shows no changes. But the underlying API call silently fails. The token is still active on the cluster.</p>