Amazon Elasticache
AWSOfficialPublished by AWS
- Skill
- Tool integration
- Cloud and DevOps
- Apache-2.0
- Medium risk
- Has scripts
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
The Amazon ElastiCache skill provides a structured, modular approach to managing in-memory data stores on AWS. It guides developers through the entire lifecycle of ElastiCache and Valkey, from initial requirements gathering and provisioning to complex data modeling, AI-driven vector search, and operational monitoring. The skill enforces best practices for connection safety, security, and infrastructure-as-code, ensuring reliable performance for caching, session management, and GenAI workloads.
What it does
- Assesses workload requirements to recommend optimal ElastiCache configurations.
- Automates provisioning and connectivity setup for serverless and node-based clusters.
- Provides implementation patterns for common use cases like cache-aside, session stores, and rate limiting.
- Supports advanced AI workloads including semantic caching, RAG, and vector similarity search.
- Delivers operational diagnostics for performance tuning, cost optimization, and troubleshooting.
- Manages migration paths from self-managed Redis or between different deployment models.
When to use it
- When you need to reduce database load or improve API response times with an in-memory cache.
- When implementing AI agent memory, RAG retrieval, or semantic caching for LLM applications.
- When migrating existing Redis workloads to a managed AWS environment.
- When troubleshooting performance issues like high latency, replication lag, or memory pressure.
- When setting up secure, production-ready caching infrastructure using IaC.
Advantages
- Standardizes deployment and operational patterns across development teams.
- Ensures compliance with security best practices like TLS and IAM authentication.
- Reduces configuration errors through automated input validation and tagging.
- Provides clear guidance on engine selection and version-specific feature availability.
- Simplifies complex tasks like cross-region migration and vector search setup.
Usage examples
- “I need to speed up my RDS database. Should I use ElastiCache?”
- The agent will initiate the requirements sub-skill to analyze your workload, stack, and latency needs, then provide a recommendation on whether ElastiCache is the right fit.
- “How do I set up a Valkey cluster for vector search?”
- The agent will route to the genai sub-skill, verify you are using a node-based Valkey 8.2+ cluster, and provide the necessary configuration and code to enable vector similarity search.
- “My cache hit rate is low and latency is spiking. Can you help me troubleshoot?”
- The agent will activate the monitoring sub-skill to analyze your metrics, identify potential hot keys or memory imbalance, and suggest specific remediation steps.
- “Help me migrate my self-managed Redis to ElastiCache.”
- The agent will guide you through the migration sub-skill, performing preflight checks and validating your source configuration for a zero-downtime cutover.
Install
Download the skill as a ZIP:
https://mp-staging.autogineer.com/agent-skills/aws/amazon-elasticache/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip amazon-elasticache.zip -d .agents/skills
Documentation by AWS
ElastiCache
A modular ElastiCache toolkit organized as a registry of sub-skills. Each sub-skill handles one domain of ElastiCache work. The router below matches user intent to the right sub-skill, then loads only the references needed for that sub-skill.
How this skill works
Match the user's request against the semantic categories in the registry below. Match on meaning, not exact wording ("help me figure out which data structures to use" matches
data-modelingeven without the word "pattern").Disambiguation: If the user's intent matches multiple sub-skills, apply these rules in order:
If
.elasticache/requirements.jsonexists withinfrastructure.endpointset, prefermonitoringordata-modeling(the user has an existing cache).If no cache exists (no requirements.json or no endpoint), prefer
requirements.If still ambiguous, ask one clarifying question: "Are you looking to set up something new, or troubleshoot something existing?"
Check the Guardrails section before recommending an engine or deployment model.
Read
references/{sub-skill-id}/instructions.mdfor the matched sub-skill. If the file is not found at a relative path, check your prompt or environment for the skill directory absolute path and retry with{skill-directory}/references/{sub-skill-id}/instructions.md.If the request spans multiple sub-skills, execute them in pipeline order.
If a sub-skill requires upstream context (engine, deployment model, endpoint) not yet in session memory, route to the upstream sub-skill first.
If no sub-skill matches, activate
requirementsfirst.If a script or CLI call fails, show the error to the user and suggest a specific fix before retrying.
Sub-skill registry
Each entry has: an ID (directory name under references/), a domain description, semantic categories for matching, and upstream/downstream dependencies.
| ID | Name | Domain | Semantic Categories | Upstream | Downstream |
|---|---|---|---|---|---|
requirements | Solution Fit | Gathers workload, stack, scale, latency, persistence, and budget through workspace scan + structured interview. Decides whether ElastiCache is the right service and hands off with a routing recommendation. | I need a cache, speed up my app, reduce database load, lower Bedrock cost, should I use ElastiCache, what's best for my workload, evaluating cache options, ElastiCache vs X, Valkey vs X, vague new workload | — | setup, data-modeling, genai, monitoring, migration |
setup | Create and Connect | Provisioning, connectivity, security, authentication, IaC, deployment choice. Gets the user to a working cache with least friction. Covers engine selection, serverless vs node-based, VPC, TLS, RBAC/IAM, jump-host/SSM tunnels, CLI/SDK/CFN/CDK/Terraform starters. | create a cache, set up ElastiCache, provision, Valkey cluster, connect Lambda/ECS/EKS/EC2, VPC, security groups, TLS, RBAC, IAM auth, jump host, SSM tunnel, CloudFormation, CDK, Terraform, engine selection, serverless vs node-based, backup, snapshot, restore, export | requirements (optional) | data-modeling, genai, monitoring |
data-modeling | Application Patterns | Picks data structures, key schema, TTL strategy, invalidation approach, and client code for non-AI patterns: cache-aside, session store, rate limiting, leaderboards, counters, pub/sub, streams, shopping carts, job queues, activity feeds. | session store, rate limiting, leaderboard, cache-aside, query caching, counters, streams, pub/sub, shopping cart, job queue, activity feed, key schema, TTL, invalidation, data structures | setup (cache must exist) | monitoring |
genai | AI and Vector Workloads | Classifies request into Mode 1 (plain cache), Mode 2 (semantic response cache), or Mode 3 (full vector search). Selects Valkey and forces node-based Valkey 8.2 or above (recommend 9.0) when server-side vector similarity is needed. Covers semantic caching, agent memory, RAG retrieval, recommendation, personalization, conversation/session persistence for AI agents, and framework wiring (Strands, mem0, LangChain). | semantic cache, RAG, agent memory, conversational memory, vector search, embeddings, recommendation, personalization, Bedrock latency, Bedrock cost, LLM caching, Strands, mem0, LangChain, conversation history, AI session store, embedding provider, framework integration | setup (cache must exist) | monitoring |
monitoring | Operate and Observe | Diagnoses performance, cost, and reliability using metrics first, then recommends the smallest change. Covers dashboards, alarms, log delivery, cost reporting, event routing, troubleshooting high CPU / memory / replication lag / connection spikes / low hit rate / hot keys / big keys / slot imbalance / latency spike root cause. | cache is slow, cost too high, hit rate low, high CPU, memory pressure, replication lag, connection spikes, dashboards, alarms, CloudWatch, cost comparison, troubleshoot, hot key, uneven shard load, one node pinned, big key, memory bloat, which key is biggest, keyspace distribution, prefix analysis, cost attribution by tenant, memory imbalance, one shard full, slot memory skew, latency spike, slow command incident, root cause for latency bump | — | setup, migration |
migration | Engine and Platform Migration | Selects the migration path and sequences preflight, validation, cutover, and rollback. Covers self-managed Redis → ElastiCache, Redis OSS → Valkey, node-based ↔ serverless, version upgrades. Hard validate-before-migrate gate. | migrate, Redis OSS to Valkey, self-managed to ElastiCache, node-based to serverless, serverless to node-based, engine upgrade, version upgrade, zero-downtime cutover, rollback | — | setup, monitoring |
Pipeline order
Sub-skills run independently, but common multi-step journeys follow these pipelines:
requirements→setup→ (data-modeling|genai) →monitoringmigration→setup→monitoringmonitoring→setup|migration(if metrics indicate)
State handoff: requirements.json
.elasticache/requirements.json is the single source of truth for cross-sub-skill state. Each sub-skill reads it at start and writes its section after completing work. Read before writing; merge, do not overwrite.
| Section | Owner | Key fields |
|---|---|---|
| top-level | requirements | engine, deployment_model, region, runtime, patterns, use_case, vpc_id, subnet_ids, security_group_ids |
infrastructure | setup | cache_name, resource_id, engine_version, topology, endpoint, port, auth_model, tls, client_library, execution_path, access_mode, tunnel_instance_id, embedding_provider, embedding_model, embedding_dim, embedding_module |
genai | genai | mode, mode_2_path, framework |
migration | migration | source_type, source_host, migration_path, cutover_status |
Ownership note:
deployment_modelis set byrequirementsduring initial interview.migrationmay update it after an engine or deployment model switch (e.g., node-based to serverless).
requirements.json should include "schema_version": 1 and "last_updated": "<ISO timestamp>" at the top level. Every sub-skill that writes to requirements.json must update last_updated. If last_updated is older than 7 days, warn the user that cached state may be stale.
requirements.json tracks one active cache. If the user works with multiple caches in the same project, confirm which cache is active before reading or writing state.
When a sub-skill needs upstream context (engine, endpoint, auth model), check requirements.json first. If the field is null or the file does not exist, route to the upstream sub-skill.
Global rules (apply to every sub-skill)
Execution path. Use AWS CLI, SDK (boto3), CloudFormation, or CDK as the primary path for control-plane work. Use valkey-py as the primary path for data-plane work.
Response depth. Summary (2-3 sentences) for "should I" or "which" questions. Standard (recommendation + config + code + next steps) by default. Expert (full decision matrix with alternatives, cost, security caveats) for "why" or "compare all" questions. Escalate on user request; never downgrade unprompted.
Session memory. Track region, VPC, engine, deployment model, auth model, compute runtime, and language. Carry forward across sub-skills. Do not re-ask. If the user overrides a value, update it everywhere. Inferred values (from workspace scan or IaC) must be re-confirmed before high-risk decisions (engine, deployment model, security posture); low-risk inferences (language, framework, region) can be used as defaults silently.
Source priority. Always answer from skill-local files first (sub-skill references, then
scripts/). Do not fetch external documentation or web search unless the local files cannot answer the query. When local files are insufficient, fall back to official AWS docs: https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/ for features and https://aws.amazon.com/elasticache/pricing/ for pricing. Never invent price points or version constraints. If the user references a Valkey or Redis version, feature, or pricing tier not covered in local files, fall back to https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/ before answering. Do not extrapolate from local content that may be outdated.Freshness disclaimer. When outputting pricing, version constraints, or feature availability, include a one-line disclaimer: "For current pricing see https://aws.amazon.com/elasticache/pricing/. For current feature availability see https://docs.aws.amazon.com/AmazonElastiCache/latest/dg/."
Connection safety. Never create a Valkey/Redis client at module level (top of file, import time). Initialize connections inside a function or on first use. Module-level connections crash applications that import the module before the cache is reachable.
Code environment. Use
python3(notpython) in all commands and shebangs. Do not generatepip installorpytestcommands in application code. Prefer the agent's file-writing tool over shell redirection for writing files.Input validation (write operations only). Before running any create, modify, or delete CLI command or SDK call that uses user-provided values (cache name, region, subnet IDs, security group IDs, VPC ID, KMS key, snapshot name), validate them with
scripts/input_validator.py. Runpython3 scripts/input_validator.py cache_name=<val> region=<val> ...or importvalidate_allas a library. Skip validation for read-only operations (describe, list) where bad input is harmless.Resource tagging (always apply on resource creation). When creating any cache (
create-serverless-cache,create-replication-group,create-cache-cluster), ALWAYS include these tags:--tags Key=managed_by,Value=aws-skills Key=skill,Value=elasticache Key=skill_version,Value=1.0.0 Key=created_by,Value=elasticache-skill Key=generation_model,Value={your-model-id}Example:
--tags Key=managed_by,Value=aws-skills Key=skill,Value=elasticache Key=skill_version,Value=1.0.0 Key=created_by,Value=elasticache-skill Key=generation_model,Value=claude-sonnet-4-20250514Set
generation_modelto your own model identifier. Include these tags even if the user does not mention tagging. If the user provides additional tags, append these to their tags rather than replacing them.
Reference loading
Load additional references only when the current turn's answer requires them.
On-demand pointers (not preloaded; fetch when the trigger applies):
references/shared-ux/production-readiness.md— when the user asks if their cache is ready for production, or after setup completes and the user wants to go to productionreferences/shared-ux/action-safety.md— before any destructive action (risk levels, never-auto-execute list)references/shared-ux/error-remediation.md— when the user hits a specific ElastiCache error code (MOVED, CROSSSLOT, CLUSTERDOWN, MULTI/EXEC+IAM, etc.)references/shared-foundation/boundary-doc.md— when the user asks what this skill coversreferences/shared-foundation/attribution.md— when generating CLI commands, SDK code, or IaC templatesreferences/shared-foundation/architecture-diagrams.md— when the user asks for architecture diagrams or visual referencereferences/shared-runtime/lambda.md— when connecting from Lambda (cold start gotchas, IAM auth code, lazy init)references/shared-runtime/ecs.md— when connecting from ECS (SIGTERM shutdown, connection pool drain, task definition)references/shared-runtime/eks.md— when connecting from EKS (IRSA, service mesh bypass, SecurityGroupPolicy CRD)references/shared-runtime/api-gateway.md— when integrating with API Gateway (no direct path, caching layers comparison)references/shared-runtime/rds-acceleration.md— when caching RDS/Aurora queries (thundering herd, stampede protection, invalidation)references/shared-runtime/secret-injection.md— when the user asks about credential management per compute platformreferences/shared-security/encryption-defaults.md— when adding encryption to an existing unencrypted cluster (TLS two-step migration, at-rest immutability)references/shared-security/config-guardrails.md— when the user wants continuous compliance monitoring (AWS Config rules, custom Lambda rules)references/shared-security/vpc-patterns.md— when debugging port/security-group issues (port 6380 serverless reader, anti-patterns)
Folder convention:
references/contains 10 folders. 6 match the sub-skills (requirements,setup,data-modeling,genai,monitoring,migration) and are routing destinations. The 4shared-*folders (shared-foundation,shared-ux,shared-security,shared-runtime) are cross-cutting material loaded on demand, not routing destinations.
Guardrails
| Priority | Rule |
|---|---|
| CRITICAL | Vector search MUST use node-based Valkey 8.2 or above. Serverless does NOT support vector search. Never suggest serverless for vector search. Apply this regardless of which sub-skill activates. |
| CRITICAL | Do not invent price points or version constraints. Use scripts/price_calculator.py and current AWS docs when precision matters. |
| HIGH | Do not recommend Memcached when the user needs persistence, replication, RBAC or IAM auth, sorted sets, streams, pub/sub, or vector search. |
| HIGH | Do not assume local laptop access works directly. ElastiCache is VPC-centric; explain VPC, tunnel, or jump-host access when needed. |
| STANDARD | Do not trigger on every generic Redis mention. Trigger when the user is clearly asking about AWS, managed caching, migration, connectivity, pricing, operations, or AWS service integration. |
| STANDARD | For ambiguous "cache" requests inside AWS contexts, activate this skill and start with requirements. |
Product truths
ElastiCache Serverless deploys in under a minute and removes infrastructure management.
Valkey serverless pricing is 33% lower than other supported engines; node-based Valkey pricing is 20% lower.
Serverless caches have in-transit encryption always enabled (cannot be disabled).
IAM auth is available for all ElastiCache Valkey versions (7.2 is the baseline Valkey version on ElastiCache) and Redis OSS 7.0+.
Valkey version ladder: 7.2 (baseline), 8.0 (20% more data per node (capacity improvement), per-slot metrics), 8.1 (Bloom filters, COMMANDLOG, SET IFEQ, 20% less memory via new hash table (efficiency improvement)), 8.2 (vector search), 9.0 (recommended default for new clusters). Recommend Valkey 9.0 for new clusters unless a specific feature dictates otherwise.
Vector search is available for Valkey 8.2 or above on node-based clusters (recommend 9.0).
Global Datastore is available for node-based clusters only. It does not support IPv6 or Local Zones. Global Datastore supports AUTH and RBAC. Cross-region failover must be promoted manually (no autofailover across regions). At-rest encryption must be enabled on all clusters in the Global Datastore, but each cluster can use a separate KMS key per region.
Online migration from self-managed Redis to ElastiCache requires: (source) AUTH must not be enabled,
protected-modeset tono, replication and administrative commands must not be renamed (e.g.,sync,psync,info,config,command,cluster); (target) encryption in-transit disabled, Multi-AZ enabled, engine version Redis OSS 5.0.6+ or Valkey 7.2+, not part of a Global Datastore, data tiering disabled. Shard counts must match between source and target. All source Redis instances must use the same port. Online migration is not supported for serverless caches (node-based targets only). Seereferences/migration/topology-validation.mdfor the full checklist.
Files
- ATTRIBUTION.mdAdded by AutoGineer924 B
- LICENSELicence file added by AutoGineer9.9 KiB
- NOTICELicence file added by AutoGineer67 B
- SKILL.md17.8 KiB
- assets/examples/sample_commandstats.csv882 B
- assets/examples/sample_input_simple.csv449 B
- references/data-modeling/command-availability.md6.1 KiB
- references/data-modeling/common-patterns.md8.6 KiB
- references/data-modeling/instructions.md9.9 KiB
- references/data-modeling/memcached-recipe.md5.2 KiB
- references/data-modeling/recipe-gallery.md8.2 KiB
- references/genai/agent-memory.md5.9 KiB
- references/genai/elasticache-search.md16.9 KiB
- references/genai/embedding-providers.md8.6 KiB
- references/genai/framework-guide.md4.9 KiB
- references/genai/instructions.md9.7 KiB
- references/genai/rag-retrieval.md9.3 KiB
- references/genai/semantic-cache.md8.9 KiB
- references/genai/session-store.md6.4 KiB
- references/migration/auth-migration.md14.4 KiB
- references/migration/feature-comparison.md10.9 KiB
- references/migration/global-datastore-operations.md8.0 KiB
- references/migration/instructions.md14.8 KiB
- references/migration/rollback-procedures.md16.9 KiB
- references/migration/self-managed-migration.md14.6 KiB
- references/migration/sizing-assessment.md6.8 KiB
- references/migration/topology-validation.md8.1 KiB
- references/migration/upgrade-patching.md13.2 KiB
- references/migration/valkey-migration-guide.md13.5 KiB
- references/monitoring/alarm-packs.md8.4 KiB
- references/monitoring/big-key-hunter.md6.8 KiB
- references/monitoring/client-tuning-and-diagnostics.md11.8 KiB
- references/monitoring/cloudwatch-dashboards.md7.7 KiB
- references/monitoring/cost-reporting.md11.9 KiB
- references/monitoring/event-routing.md9.5 KiB
- references/monitoring/hot-key-detection.md10.8 KiB
- references/monitoring/instructions.md8.8 KiB
- references/monitoring/key-space-distribution-by-prefix.md6.8 KiB
- references/monitoring/log-delivery.md7.9 KiB
- references/monitoring/slot-memory-imbalance-detection.md6.7 KiB
- references/monitoring/slow-log-cross-signal-diagnosis.md8.5 KiB
- references/monitoring/troubleshooting.md17.9 KiB
- references/requirements/instructions.md9.9 KiB
- references/setup/auth-model-selector.md3.3 KiB
- references/setup/cluster-topology.md3.6 KiB
- references/setup/connection-guide.md6.4 KiB
- references/setup/connectivity-diagnostics.md6.9 KiB
- references/setup/create-secure-cache.md8.4 KiB
- references/setup/engine-selection.md2.1 KiB
- references/setup/iac-best-practices.md7.3 KiB
- references/setup/iac-reference.md6.2 KiB
- references/setup/iam-policies.md2.7 KiB
- references/setup/instructions.md8.6 KiB
- references/setup/serverless-vs-node.md12.7 KiB
- references/setup/service-quotas.md2.9 KiB
- references/shared-foundation/architecture-diagrams.md8.0 KiB
- references/shared-foundation/attribution.md3.7 KiB
- references/shared-foundation/boundary-doc.md4.9 KiB
- references/shared-runtime/api-gateway.md5.4 KiB
- references/shared-runtime/ecs.md7.5 KiB
- references/shared-runtime/eks.md10.5 KiB
- references/shared-runtime/lambda.md10.1 KiB
- references/shared-runtime/rds-acceleration.md12.6 KiB
- references/shared-runtime/secret-injection.md14.1 KiB
- references/shared-security/config-guardrails.md8.0 KiB
- references/shared-security/encryption-defaults.md4.2 KiB
- references/shared-security/vpc-patterns.md2.8 KiB
- references/shared-ux/action-safety.md9.8 KiB
- references/shared-ux/error-remediation.md12.1 KiB
- references/shared-ux/production-readiness.md5.5 KiB
- scripts/collect_metrics.shScript5.2 KiB
- scripts/command_classifier.pyScript6.2 KiB
- scripts/find_tunnel_host.pyScript7.2 KiB
- scripts/generate_dashboards.pyScript27.1 KiB
- scripts/input_validator.pyScript10.6 KiB
- scripts/migration_preflight.pyScript19.5 KiB
- scripts/price_calculator.pyScript14.4 KiB
- scripts/pricing.pyScript20.2 KiB
- scripts/security_audit.pyScript19.5 KiB
- scripts/serverless_estimator.pyScript28.4 KiB
- scripts/start_tunnel.pyScript11.7 KiB
- scripts/test_connection.pyScript13.3 KiB
- scripts/validate_references.pyScript10.6 KiB
scripts/migration_preflight.py
#!/usr/bin/env python3
"""
ElastiCache Migration Preflight Check
Connects to a source Redis/Valkey instance and evaluates migration readiness:
- Engine version compatibility
- Module detection (RedisJSON, RediSearch, RedisTimeSeries, etc.)
- Key count and memory usage
- Persistence configuration
- Cluster mode detection
- Unsupported command sampling
Usage:
# Check a source Redis instance (plain)
python migration_preflight.py --host redis.example.com --port 6379
# With TLS
python migration_preflight.py --host redis.example.com --port 6379 --tls
# With auth
python migration_preflight.py --host redis.example.com --password mypassword
# JSON output
python migration_preflight.py --host redis.example.com --json
# Via tunnel (local port forward)
python migration_preflight.py --host localhost --port 6379
Requires: valkey (pip install valkey)
"""
import argparse
import json
import sys
# ---------------------------------------------------------------------------
# Dependency check -- fail early with an actionable message instead of a
# raw ImportError traceback.
# ---------------------------------------------------------------------------
try:
import valkey as redis
except ImportError:
print(
"Error: the 'valkey' package is required for this script.\n"
"Install with:\n"
" pip install valkey"
)
sys.exit(1)
# Commands not available on ElastiCache (restricted or modified)
ELASTICACHE_RESTRICTED_COMMANDS = {
"BGSAVE", "BGREWRITEAOF", "CONFIG", "DEBUG", "MIGRATE",
"SAVE", "SHUTDOWN", "SLAVEOF", "REPLICAOF", "SYNC",
}
# Known Redis modules and their ElastiCache availability
MODULE_COMPATIBILITY = {
"search": {"name": "RediSearch", "elasticache": False, "note": "Not available on ElastiCache. Valkey 8.2 provides native vector search (FT.* commands) on node-based clusters."},
"ReJSON": {"name": "RedisJSON", "elasticache": False, "note": "The ReJSON module cannot be loaded on ElastiCache. However, ElastiCache provides native JSON support (JSON.* commands) in Valkey 7.2+ and Redis OSS 6.2.6+. Verify command compatibility before migration."},
"timeseries": {"name": "RedisTimeSeries", "elasticache": False, "note": "Not available on ElastiCache. Consider CloudWatch or Timestream."},
"bf": {"name": "RedisBloom", "elasticache": False, "note": "No (module) / Yes (native BF.* commands in Valkey 8.1+)."},
"graph": {"name": "RedisGraph", "elasticache": False, "note": "Deprecated. Consider Neptune or OpenSearch."},
"ai": {"name": "RedisAI", "elasticache": False, "note": "Not available on ElastiCache. Use SageMaker for ML inference."},
}
def run_preflight(host, port, password=None, use_tls=False, username=None):
"""Run all preflight checks against a source Redis/Valkey instance."""
findings = []
info = {"host": host, "port": port}
try:
r = redis.Redis(
host=host, port=port,
password=password, username=username,
ssl=use_tls,
decode_responses=True,
socket_timeout=10,
socket_connect_timeout=10,
)
r.ping()
findings.append({"check": "Connectivity", "status": "PASS", "detail": f"Connected to {host}:{port}"})
except (redis.ConnectionError, redis.TimeoutError) as e:
return {"error": f"Cannot connect to {host}:{port}: {e}", "info": info, "findings": [
{"check": "Connectivity", "status": "FAIL", "detail": str(e)}
]}
except redis.AuthenticationError as e:
return {"error": f"Authentication failed: {e}", "info": info, "findings": [
{"check": "Connectivity", "status": "FAIL", "detail": f"Auth failed: {e}"}
]}
# Server info
try:
server_info = r.info()
except Exception as e:
findings.append({"check": "Server info", "status": "ERROR", "detail": f"Could not retrieve INFO: {e}"})
r.close()
return {"info": info, "findings": findings}
# Engine and version
redis_version = str(server_info.get("redis_version", "unknown"))
info["redis_version"] = redis_version
info["os"] = server_info.get("os", "unknown")
info["uptime_days"] = round(server_info.get("uptime_in_seconds", 0) / 86400, 1)
parts = redis_version.split(".")
try:
version_tuple = tuple(int(p) for p in parts[:2]) if len(parts) >= 2 else (int(parts[0]), 0)
except (ValueError, IndexError):
version_tuple = (0, 0)
if version_tuple >= (7, 0):
findings.append({"check": "Engine version", "status": "PASS",
"detail": f"Redis {redis_version} can migrate to Valkey 7.2 (direct in-place switch) or Redis OSS 7+ on ElastiCache"})
elif version_tuple >= (6, 0):
findings.append({"check": "Engine version", "status": "WARN",
"detail": f"Redis {redis_version} standard support ends January 31, 2027. Extended Support charges begin February 1, 2027. Recommend upgrading to Valkey before then."})
elif version_tuple >= (5, 0):
findings.append({"check": "Engine version", "status": "FAIL",
"detail": f"Redis {redis_version} standard support ended January 31, 2026. Extended Support charges are now active (since Feb 1, 2026). Upgrade to Valkey to eliminate surcharges."})
findings.append({"check": "Extended Support", "status": "FAIL",
"detail": f"Redis {redis_version} is enrolled in Extended Support. Year 1-2 premium: 80% surcharge. Year 3 premium: 160% surcharge. Run scripts/price_calculator.py --extended-support to see costs."})
else:
findings.append({"check": "Engine version", "status": "FAIL",
"detail": f"Redis {redis_version} standard support ended January 31, 2026. Extended Support charges are now active. Upgrade to Valkey to eliminate surcharges."})
findings.append({"check": "Extended Support", "status": "FAIL",
"detail": f"Redis {redis_version} is enrolled in Extended Support. Year 1-2 premium: 80% surcharge. Year 3 premium: 160% surcharge. Run scripts/price_calculator.py --extended-support to see costs."})
# Cluster mode
cluster_enabled = server_info.get("cluster_enabled", 0)
info["cluster_mode"] = bool(cluster_enabled)
if cluster_enabled:
findings.append({"check": "Cluster mode", "status": "INFO",
"detail": "Cluster mode enabled — target must also be cluster mode enabled"})
else:
findings.append({"check": "Cluster mode", "status": "INFO",
"detail": "Standalone or replica mode — can target cluster mode disabled or enabled"})
# Connected replicas
connected_replicas = server_info.get("connected_slaves", 0)
info["connected_replicas"] = connected_replicas
findings.append({"check": "Replication", "status": "INFO",
"detail": f"{connected_replicas} connected replica(s)"})
# Memory
used_memory_mb = round(server_info.get("used_memory", 0) / (1024 * 1024), 1)
used_memory_gb = round(used_memory_mb / 1024, 2)
peak_memory_mb = round(server_info.get("used_memory_peak", 0) / (1024 * 1024), 1)
info["used_memory_mb"] = used_memory_mb
info["used_memory_gb"] = used_memory_gb
info["peak_memory_mb"] = peak_memory_mb
findings.append({"check": "Memory usage", "status": "INFO",
"detail": f"Current: {used_memory_mb} MB ({used_memory_gb} GB), Peak: {peak_memory_mb} MB"})
# Key count
try:
db_info = {k: v for k, v in server_info.items() if k.startswith("db")}
total_keys = sum(v.get("keys", 0) for v in db_info.values() if isinstance(v, dict))
info["total_keys"] = total_keys
info["databases_in_use"] = len(db_info)
findings.append({"check": "Key count", "status": "INFO",
"detail": f"{total_keys:,} keys across {len(db_info)} database(s)"})
if len(db_info) > 1:
findings.append({"check": "Multiple databases", "status": "WARN",
"detail": f"{len(db_info)} databases in use — ElastiCache cluster mode uses only db0. Plan key migration."})
except Exception:
info["total_keys"] = "unknown"
# Persistence
rdb_enabled = server_info.get("rdb_last_save_time", 0) > 0
aof_enabled = server_info.get("aof_enabled", 0) == 1
info["rdb_enabled"] = rdb_enabled
info["aof_enabled"] = aof_enabled
persistence_detail = []
if rdb_enabled:
persistence_detail.append("RDB snapshots active")
if aof_enabled:
persistence_detail.append("AOF enabled")
if not persistence_detail:
persistence_detail.append("No persistence")
findings.append({"check": "Persistence", "status": "INFO",
"detail": ", ".join(persistence_detail)})
# Modules
try:
modules = r.execute_command("MODULE", "LIST")
loaded_modules = []
for mod in modules:
if isinstance(mod, list):
mod_name = mod[1] if len(mod) > 1 else str(mod)
elif isinstance(mod, dict):
mod_name = mod.get("name", str(mod))
else:
mod_name = str(mod)
loaded_modules.append(mod_name)
info["modules"] = loaded_modules
if not loaded_modules:
findings.append({"check": "Modules", "status": "PASS", "detail": "No modules loaded"})
else:
for mod_name in loaded_modules:
compat = MODULE_COMPATIBILITY.get(mod_name)
if compat:
if compat["elasticache"]:
findings.append({"check": f"Module: {compat['name']}", "status": "INFO",
"detail": str(compat["note"])})
else:
findings.append({"check": f"Module: {compat['name']}", "status": "FAIL",
"detail": str(compat["note"])})
else:
findings.append({"check": f"Module: {mod_name}", "status": "WARN",
"detail": f"Unknown module '{mod_name}' — verify compatibility with ElastiCache"})
except redis.ResponseError:
info["modules"] = []
findings.append({"check": "Modules", "status": "INFO",
"detail": "MODULE LIST not available (may be restricted or old version)"})
# Commandstats — check for restricted command usage
cmdstats = {}
try:
cmdstats = r.info("commandstats")
for cmd_name in ELASTICACHE_RESTRICTED_COMMANDS:
stat_key = f"cmdstat_{cmd_name.lower().replace(' ', '|')}"
if stat_key in cmdstats:
calls = cmdstats[stat_key].get("calls", 0)
if calls > 0:
findings.append({"check": "Restricted command usage", "status": "WARN",
"detail": f"Command {cmd_name} called {calls} times. This command is restricted on ElastiCache. Review usage before migration."})
except redis.ResponseError:
findings.append({"check": "Restricted command usage", "status": "INFO",
"detail": "INFO COMMANDSTATS not available (may be restricted by ACL or unsupported on this engine version)"})
except (redis.ConnectionError, redis.TimeoutError) as e:
findings.append({"check": "Restricted command usage", "status": "INFO",
"detail": f"Could not retrieve commandstats: {e}"})
# Lua script detection
lua_detected = False
try:
eval_calls = 0
for key in ("cmdstat_eval", "cmdstat_evalsha"):
if key in cmdstats:
eval_calls += cmdstats[key].get("calls", 0)
if eval_calls > 0:
lua_detected = True
findings.append({"check": "Lua scripts", "status": "WARN",
"detail": f"Lua scripts detected ({eval_calls} eval calls). Test all Lua scripts against the target engine. Scripts using module commands or hardcoded key names may break."})
except (KeyError, TypeError, AttributeError):
findings.append({"check": "Lua scripts", "status": "INFO",
"detail": "Unable to detect Lua script usage from commandstats"})
info["lua_scripts_detected"] = lua_detected
# Large key sampling
try:
large_keys_found = []
for _ in range(20):
key = r.randomkey()
if key is None:
break
try:
usage = r.memory_usage(key)
if usage is not None and usage > 1048576:
size_mb = round(usage / (1024 * 1024), 2)
large_keys_found.append((key, size_mb))
except Exception:
findings.append({"check": "Large key sampling", "status": "INFO",
"detail": "MEMORY USAGE command not available, skipping large key check"})
break
for key, size_mb in large_keys_found:
key_type = r.type(key) if key else "unknown"
findings.append({"check": "Large key sampling", "status": "WARN",
"detail": f"Large key detected ({key_type}, {size_mb}MB). Large keys can cause replication timeouts and event loop blocking during migration."})
except Exception:
pass
# Maxmemory policy
# CONFIG GET is restricted on ElastiCache managed endpoints. Detect them by
# hostname and skip CONFIG in that case, advising the user to check via the
# AWS API (describe-cache-parameters) instead.
is_elasticache = host.endswith(".cache.amazonaws.com")
if is_elasticache:
info["maxmemory_policy"] = "unknown (ElastiCache source)"
findings.append({"check": "Eviction policy", "status": "INFO",
"detail": "CONFIG command is restricted on ElastiCache. "
"Check the eviction policy via: aws elasticache describe-cache-parameters "
"--cache-parameter-group-name <param-group> "
"--query \"Parameters[?ParameterName=='maxmemory-policy']\""})
else:
try:
config = r.config_get("maxmemory-policy")
policy = config.get("maxmemory-policy", "unknown")
info["maxmemory_policy"] = policy
if policy in ("noeviction",):
findings.append({"check": "Eviction policy", "status": "WARN",
"detail": f"Policy is '{policy}' -- writes will fail when memory is full. Consider volatile-lru or allkeys-lru."})
else:
findings.append({"check": "Eviction policy", "status": "INFO",
"detail": f"Policy: {policy}"})
except redis.ResponseError:
info["maxmemory_policy"] = "unknown"
# Data tiering advisory
findings.append({"check": "Data tiering advisory", "status": "INFO",
"detail": "If targeting r6gd node types (data tiering), note: online migration is not supported for r6gd clusters. "
"Use backup/restore instead. Data tiering only supports volatile-lru, allkeys-lru, volatile-lfu, allkeys-lfu, and noeviction eviction policies."})
# Sizing recommendation
findings.append({"check": "Sizing recommendation", "status": "INFO",
"detail": f"Source dataset: {used_memory_gb} GB. Use scripts/price_calculator.py to estimate serverless and node-based costs for your workload."})
try:
r.close()
except Exception:
pass
return {"info": info, "findings": findings}
def format_report(result):
"""Format preflight results as a human-readable report."""
if "error" in result:
info = result.get("info", {})
lines = [f"ERROR: {result['error']}"]
if info:
lines.append(f" Host: {info.get('host', '?')}:{info.get('port', '?')}")
return "\n".join(lines)
info = result["info"]
findings = result["findings"]
lines = []
lines.append("=" * 72)
lines.append("ElastiCache Migration Preflight Report")
lines.append("=" * 72)
lines.append("")
lines.append(f" Source: {info['host']}:{info['port']}")
lines.append(f" Redis version: {info.get('redis_version', 'unknown')}")
lines.append(f" OS: {info.get('os', 'unknown')}")
lines.append(f" Uptime: {info.get('uptime_days', '?')} days")
lines.append(f" Cluster mode: {'enabled' if info.get('cluster_mode') else 'disabled'}")
lines.append(f" Memory: {info.get('used_memory_mb', '?')} MB ({info.get('used_memory_gb', '?')} GB)")
lines.append(f" Keys: {info.get('total_keys', '?')}")
lines.append(f" Replicas: {info.get('connected_replicas', '?')}")
lines.append(f" Modules: {', '.join(info.get('modules', [])) or 'none'}")
lines.append("")
fail_count = sum(1 for f in findings if f["status"] == "FAIL")
warn_count = sum(1 for f in findings if f["status"] == "WARN")
pass_count = sum(1 for f in findings if f["status"] == "PASS")
if fail_count == 0:
lines.append(f" Verdict: READY TO MIGRATE ({pass_count} passed, {warn_count} warnings)")
else:
lines.append(f" Verdict: BLOCKERS FOUND ({fail_count} failures, {warn_count} warnings)")
lines.append("")
lines.append("-" * 72)
status_order = {"FAIL": 0, "WARN": 1, "ERROR": 2, "PASS": 3, "INFO": 4}
sorted_findings = sorted(findings, key=lambda f: status_order.get(f["status"], 5))
for f in sorted_findings:
icon = {"PASS": "[OK] ", "FAIL": "[FAIL]", "WARN": "[WARN]", "INFO": "[INFO]", "ERROR": "[ERR] "}
lines.append(f" {icon.get(f['status'], '[?] ')} {f['check']}")
lines.append(f" {f['detail']}")
lines.append("")
if fail_count > 0:
lines.append("=" * 72)
lines.append("MIGRATION BLOCKERS")
lines.append("=" * 72)
lines.append("")
for f in sorted_findings:
if f["status"] == "FAIL":
lines.append(f" - {f['check']}: {f['detail']}")
lines.append("")
lines.append(" Resolve blockers before starting migration.")
lines.append(" See references/migration/instructions.md for guidance.")
lines.append("")
lines.append(" Next steps:")
lines.append(" 1. Resolve any blockers above")
lines.append(" 2. Run: python scripts/price_calculator.py to estimate target cost")
lines.append(" 3. Use the AWS CLI test-migration command to validate connectivity to the target cluster")
lines.append(" 4. See references/migration/instructions.md for the full migration workflow")
lines.append("")
return "\n".join(lines)
if __name__ == "__main__":
parser = argparse.ArgumentParser(description="ElastiCache Migration Preflight Check")
parser.add_argument("--host", required=True, help="Source Redis/Valkey hostname")
parser.add_argument("--port", type=int, default=6379, help="Port (default: 6379)")
parser.add_argument("--password", default=None, help="AUTH password")
parser.add_argument("--username", default=None, help="Username (for ACL-based auth)")
parser.add_argument("--tls", action="store_true", help="Use TLS")
parser.add_argument("--json", action="store_true", help="Output as JSON")
args = parser.parse_args()
result = run_preflight(args.host, args.port, args.password, args.tls, args.username)
if args.json:
print(json.dumps(result, indent=2, default=str))
else:
print(format_report(result))
if "error" in result:
sys.exit(1)
fail_count = sum(1 for f in result.get("findings", []) if f["status"] == "FAIL")
sys.exit(1 if fail_count > 0 else 0)
Requirements and compatibility
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Needs: Needs Python, Needs Node.js
Security
What our scanner noticed· Medium risk
- References to credential files
- Instructions that use the network
- Scripts that your agent may run
This skill includes scripts that your agent may run. Read them before you use it.
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Published by
- AWS
- Publisher
- AWS (Official)
- Source
- aws/agent-toolkit-for-aws · skills/specialized-skills/database-skills/amazon-elasticache · commit 0a218f8
- Licence
- Apache License 2.0 (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE)
- NOTICE (added by AutoGineer from NOTICE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by AWS.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download amazon-elasticache.zip