Konfirmity

Enable cross region backups for Amazon ElastiCache

Samkit Jain

Samkit Jain

Updated 2026-10-09

This guide will help you to enable cross region or cross account backups for Amazon ElastiCache.

The Three-Step Summary

The process breaks down into three steps:

  1. Take a backup (snapshot) of the source cluster.
  2. Export that backup to S3 in the same region as the source, then copy the object to S3 in the target region of the target account.
  3. In the target region, create a new ElastiCache cluster and seed it from the RDB file in S3.

Secure your AWS data layer before the next audit arrives.

Share your work email and turn ElastiCache hardening into audit-ready evidence.

We check that your email domain is real and can receive mail before sending. If we can't verify it, we won't be able to follow up — so please use a work address rather than a forwarding or temporary one.

We'd like to know who we're talking to. By submitting this form you agree that we may contact you about Konfirmity — no more than six emails a year, and we won't ask again each time. You can unsubscribe from any of them, and we'll stop. See our Privacy Policy.

Step-by-Step ElastiCache Backup and Restore

  1. [Optional, can use the automated one as well] Create Manual Backup of ElastiCache Cluster.
    1. Sign in to the AWS Management Console.
    2. Open the ElastiCache console at https://console.aws.amazon.com/elasticache/.
    3. From navigation pane, choose Redis OSS caches or **Valkey caches.**‍
    4. Select the checkbox next to your cluster name.
    5. Choose **Backup.**‍
    6. In the Create Backup dialog:
      1. Enter a descriptive name (e.g., my-cluster-backup-20250904).
      2. Choose **Create Backup.**‍
    7. Wait for backup status to change from "creating" to "available".
  2. Create S3 Bucket in the Source Region.
  3. Grant ElastiCache Access to Source S3 Bucket.
    1. In S3 console, select your bucket.
    2. Go to Permissions tab.
    3. Under Access Control List (ACL), choose **Edit.**‍
    4. Add grantee with canonical ID: 540804c33a284a299d2547575ce1010f2312ef3da9b3a053c8bc45bf233e4353
    5. Grant Read and Write permissions for Objects.
    6. Grant Read permissions for Bucket ACL.
  4. Export Backup to Source S3 Bucket.
    1. In ElastiCache console, go to Backups.
    2. Select your backup.
    3. Choose Actions → **Export.**‍
    4. Enter export name (ElastiCache will append -0001.rdb).
    5. Select your S3 bucket.
    6. Choose **Export.**‍
  5. Create S3 Bucket in the Destination Region.
  6. Copy RDB File Between Regions.
  7. Configure Destination S3 Bucket Permissions. Same as the steps in point 3.‍
  8. Create New ElastiCache Cluster from the copied RDB File.
    1. Switch to destination region in ElastiCache console.
    2. Choose Create → **Design your own cache.**‍
    3. Select Redis OSS or **Valkey.**‍
    4. Configure cluster settings (name, node type, etc.)
    5. In Import data to cluster section:
      1. Enter S3 location: your-destination-backup-bucket/exported-backup-0001.rdb‍
    6. Configure network, security, and other settings.
    7. Choose Create.

Cost Components Overview

The total cost for migrating an ElastiCache cluster to a different region consists of several components:

  1. ‍ElastiCache Backup Storage
    • Rate: $0.085 per GB per month (all AWS regions)‍
    • No charges for creating backups or restoring from backups‍
    • Duration: Temporary storage during migration process‍
  2. S3 Storage Costs
    • S3 Standard: $0.023 per GB per month (first 50TB)‍
    • Duration: Time RDB files are stored in S3 buckets‍
  3. Cross-Region Data Transfer
    • Cross-region transfer: $0.02 per GB (typical rate between most regions)‍
    • Inbound transfers to S3: Free‍
    • Outbound transfers from S3: $0.02+ per GB depending on destination‍
  4. S3 Request Charges
    • PUT requests: $0.005 per 1,000 requests‍
    • GET requests: $0.0004 per 1,000 requests‍
  5. New Cluster Costs
    • Destination cluster: Standard ElastiCache pricing in destination region‍
    • Duration: Runtime costs for new cluster

ElastiCache Cross-Region Backup FAQs

Common questions about ElastiCache cross-region backup and restore: why there is no direct snapshot copy, how the S3 hop works, and what the exercise costs.

No. Unlike RDS or Redshift, ElastiCache has no one-click cross-region snapshot copy. You export the backup to an S3 bucket in the source region, copy the resulting .rdb object to an S3 bucket in the target region, and then seed a new cluster from that file. The three-step summary above is the supported path.

Use the same export-to-S3 route, but make the destination bucket one owned by the target account. Grant ElastiCache the canonical-ID ACL permissions on each bucket it writes to or reads from, as in step 3 above, and the restore in the target account reads the .rdb file directly from its own bucket.

There is no charge for creating a backup or restoring from one. You pay for backup storage at $0.085 per GB-month, S3 Standard storage at $0.023 per GB-month, cross-region transfer at roughly $0.02 per GB, S3 request charges, and the standard hourly cost of the new cluster. For a one-off migration the transfer charge usually dominates, so delete the intermediate S3 objects and the manual backup once the new cluster is verified.

Only if you keep the proof. A configured backup satisfies an auditor's design question; what they test is operation — that a restore was actually attempted, by whom, when, and whether the data came back intact. Keep the export and restore records, plus a dated restoration-test log, and the control evidences itself instead of needing a scramble at audit time.

Free template

The ISO 27001 Backup & Disaster Recovery Policy Template

A ready-to-adapt backup and recovery policy plus a worked restoration-testing log, so cross-region backups like this one are also audit evidence. Enter your work email and we'll send the PDF.

Turn AWS backup hygiene into compliance evidence

Book a demo and we'll show how Konfirmity turns configurations like this one into evidence your next SOC 2 or ISO 27001 auditor accepts.

Book a demo

How Real Security Becomes Compliance

Built by the CTO who scaled NIUM to $2 billion. 10 years building security and compliance for regulated fintechs. 4.5 years running Konfirmity profitably.

Book a call