ElastiCache (Redis OSS) clusters should have automatic backups enabled

How to fix it

Set a snapshot retention limit above zero on the resource the finding names, so a daily automatic backup is taken and kept; zero is what turns automatic backups off. A replication group takes modify-replication-group and a cache cluster takes modify-cache-cluster, with the same retention parameter on each, and the command below is the first. A cache cluster belonging to a replication group is fixed only on the group, and its member findings clear with it.

In the console

ElastiCache → the cache or replication group → Modify → Backup → Backup retention period

With the AWS CLI

aws elasticache modify-replication-group --replication-group-id <replication-group-id> --snapshot-retention-limit <retention-days> --region <region>

With Terraform

resource "aws_elasticache_replication_group" "this" {
  replication_group_id     = var.replication_group_id
  description              = var.description
  snapshot_retention_limit = var.snapshot_retention_days
}