gopinaath/cve-2025-49844-discoveryAudits AWS ElastiCache Redis/Valkey clusters for network exposure, checking VPC, subnet, and internet gateway routes across multiple accounts and regions.
Scripts to audit AWS ElastiCache Redis and Valkey clusters for network exposure.
jq installed: brew install jqLists all Redis/Valkey clusters across specified regions.
./list-elasticache-clusters.sh
Analyzes network configuration for Redis/Valkey clusters in a single AWS account.
./check-elasticache-network.sh
Output columns:
Same analysis across multiple AWS accounts.
./check-elasticache-network-multi-account.sh accounts.txt
accounts.txt format: One AWS account ID per line. Requires AWS profiles configured matching account IDs.
Analyzes specific clusters by ARN.
./check-elasticache-network-by-arn.sh arns.txt
arns.txt format: One ElastiCache ARN per line. Non-Redis/Valkey engines flagged in Notes column.
Regions checked: ap-southeast-2, eu-central-1, eu-west-1, us-east-1, us-west-1, us-west-2
Edit the regions variable in scripts to modify.
All scripts output pipe-delimited tables. For better formatting:
./check-elasticache-network.sh | column -t -s '|'