We want to use AWS IAM Authentication in place of passwords everywhere we can. This includes between the split-synchronizer app and Elasticache Redis (or Valkey). AWS Documentation describes how to do this.
split-synchronizer uses Go, and the go-redis library. However, go-redis does not yet support IAM authentication.
Someone else got it working.
Support for Credentials Provider · redis go-redis · Discussion #2343 .
Upstream indicates the next minor version of go-redis v9.8.0 will support Credential Providers.
]The feature request is for split.io to add code into split-synchronizer to do this leveraging the code shown here.
As authenticated connections are only valid for up to 12 hours before re-connecting or re-AUTH-ing is necessary, we would want split-synchronizer to recognize this and either re-connect or re-AUTH as it sees fit.