I am trying to create a policy where users will have an ability to access the elasticache service to set and get entries from the redis instances . What actions should be allowed for the user so that it is able to perform those actions ?
is. elasticache:ModifyCacheClusterenough to provide users with such ability or is it too wide in terms of permission ? Any help woud be great .
elasticache:ModifyCacheCluster is not for command related restrictions. What you need is
Authenticating users with Role-Based Access Control which can be used with Amazon ElastiCache for Redis 6.x.
While creating users access-string will be the one that you will use to restrict commands on the given users. While creating access-string please check this documentation to how to restrict commands. it could be something like this;
-@all +get +set
This part of the documentation has some examples, but i didn't try it on production.