Skip to main content

🧠 AWS ElastiCache Replication Group is not encrypted in-transit - prod.logic.yaml🟒

Uses​

Test Results πŸŸ’β€‹

Generated at: 2025-11-17T14:33:36.246616201Z Open

ResultIdCondition IndexCondition TextRuntime Error
🟒test1βœ”οΈ 99βœ”οΈ isDisappeared(CA10__disappearanceTime__c)βœ”οΈ null
🟒test2βœ”οΈ 199βœ”οΈ extract('CA10__status__c') != 'available'βœ”οΈ null
🟒test3βœ”οΈ 299βœ”οΈ not(extract('CA10__transitEncryptionEnabled__c'))βœ”οΈ null
🟒test4βœ”οΈ 300βœ”οΈ otherwiseβœ”οΈ null

Generation Bundle​

FileMD5
Open/ce/ca/aws/elasticache/replication-group-in-transit-encryption/policy.yamlB223BD73A26B00B2FDB04AD4C591E4EE
Open/ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml32170B9C916C434CF35A2608CF934B03
Open/ce/ca/aws/elasticache/replication-group-in-transit-encryption/test-data.json4AD3AA6EB7AC3676572859CB14AFFD53
Open/types/CA10__CaAwsCacheReplicationGroup__c/object.extracts.yaml05D6F73A1FB17B4733BA531296051FB4

Available Commands​

repo-manager policies generate FULL /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/elasticache/replication-group-in-transit-encryption/prod.logic.yaml

Content​

Open File

---
inputType: "CA10__CaAwsCacheReplicationGroup__c"
testData:
- file: "test-data.json"
importExtracts:
- file: /types/CA10__CaAwsCacheReplicationGroup__c/object.extracts.yaml
conditions:
- status: "INAPPLICABLE"
currentStateMessage: "The Replication Group is not available."
check:
NOT_EQUAL:
left:
EXTRACT: "CA10__status__c"
right:
TEXT: "available"
- status: "INCOMPLIANT"
currentStateMessage: "In-transit encryption is not enabled for this Replication Group."
remediationMessage: "Consider enabling in-transit encryption for the Replication Group."
check:
NOT:
arg:
EXTRACT: "CA10__transitEncryptionEnabled__c"
otherwise:
status: "COMPLIANT"
currentStateMessage: "In-transit encryption is enabled for this Replication Group."