Skip to content

Inconsistent ACL CAT admin results between AWS ElastiCache Redis 7.1 and Redis OSS 7.0.16

0

Background

Hi AWS team, I noticed an inconsistency between AWS ElastiCache Redis 7.1 and a local Redis OSS 7.0.16 regarding the Redis ACL admin category. When I run: ACL CAT admin on both environments:

  • Local Redis OSS 7.0.16 returns 65 commands in the admin category.
  • ElastiCache Redis 7.1 returns only 46 commands.

According to AWS documentation, ElastiCache Redis 7.1 is compatible with Redis OSS 7.0, so I expected the ACL CAT admin output (the set of admin commands) to match exactly between the two environments.

However, the command lists differ. I suspect that ElastiCache intentionally restricts some high‑privilege or cluster management commands for its managed environment (see restricted commands list in doc), which affects what appears in ACL CAT admin.

Questions:

  1. Is the reduced set of commands in ACL CAT admin on ElastiCache Redis intentional due to managed restrictions?
  2. If so, could AWS provide a documented list of differences between ElastiCache ACL categories and Redis OSS?
  3. Or is this a bug in ElastiCache’s ACL category implementation?

Thanks!

asked 6 months ago63 views

1 Answer
3

As I understand the problem, the difference in command counts is due to ElastiCache being a managed service. AWS restricts certain high-privilege commands (like SHUTDOWN, REPLICAOF, or certain CONFIG subcommands) that could interfere with the managed infrastructure, which is why they are excluded from the @admin ACL category.

If you're attempting to change database parameters (which typically fall under the admin category), ElastiCache doesn't allow this directly on the node via a Redis client. Instead, you need to create a custom Cache Parameter Group in the AWS Console or via CloudFormation, Terraform, or AWS CLI. You can modify almost all variables there that Redis OSS allows via CONFIG SET, and the service will safely roll out these changes to your nodes.

In short, for a managed service like ElastiCache, administrative changes should be performed via the AWS Management Console, CLI, or Infrastructure as Code, rather than by sending raw Redis commands via a client.

Serverless caches:

Node-based clusters:

EXPERT

answered 6 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.