CloudFormationでAmazon MemoryDB for Redisのリソースを管理する

$ sudo docker pull redis:6
$ sudo docker run -d -p 6379:6379 redis:6
$ redis-cli -h localhost
localhost:6379> ACL HELP
 1) ACL <subcommand> [<arg> [value] [opt] ...]. Subcommands are:
 2) CAT [<category>]
 3)     List all commands that belong to <category>, or all command categories
 4)     when no category is specified.
 5) DELUSER <username> [<username> ...]
 6)     Delete a list of users.
 7) GETUSER <username>
 8)     Get the user's details.
 9) GENPASS [<bits>]
10)       Generate a secure 256-bit user password. The optional `bits` argument can
11)       be used to specify a different size.
12)   LIST
13)       Show users details in config file format.
14)   LOAD
15)       Reload users from the ACL file.
16)   LOG [<count> | RESET]
17)       Show the ACL log entries.
18)   SAVE
19)     Save the current config to the ACL file.
20) SETUSER <username> <attribute> [<attribute> ...]
21)     Create or modify a user with the specified attributes.
22) USERS
23)     List all the registered usernames.
24) WHOAMI
25)     Return the current connection username.
26) HELP
27)     Prints this help.

$ redis-cli -h xxxxxx.cluster-name.xxxxxx.memorydb.ap-northeast-1.amazonaws.com --tls -c
xxxxxx.cluster-name.xxxxxx.memorydb.ap-northeast-1.amazonaws.com:6379> ACL HELP
 1) ACL <subcommand> [<arg> [value] [opt] ...]. Subcommands are:
 2) LIST                             -- Show user details in config file format.
 3) USERS                            -- List all the registered usernames.
 4) GETUSER <username>               -- Get the user details.
 5) CAT                              -- List available categories.
 6) CAT <category>                   -- List commands inside category.
 7) GENPASS [<bits>]                 -- Generate a secure user password.
 8) WHOAMI                           -- Return the current connection username.
 9) LOG [<count> | RESET]            -- Show the ACL log entries.
10)   HELP
11)       Prints this help.

Type: AWS::MemoryDB::User
Properties: 
  AccessString: 
    String
  AuthenticationMode: Json
  Tags: 
    - Tag
  UserName: String

$ aws memorydb describe-users
{
    "Users": [
        {
            "Name": "default",
            "Status": "active",
            "AccessString": "on ~* &* +@all",
            "ACLNames": [
                "open-access"
            ],
            "MinimumEngineVersion": "6.0",
            "Authentication": {
                "Type": "no-password"
            },
            "ARN": "arn:aws:memorydb:ap-northeast-1:123456789012:user/default"
        }
    ]
}

AWSTemplateFormatVersion: '2010-09-09'
Resources:
  SampleCluster:
    Type: AWS::MemoryDB::Cluster
    Properties:
      ClusterName: sample-cluster
      ACLName: !Ref SampleACL
      NodeType: db.r6g.large
      NumReplicasPerShard: 1
      NumShards: 1
      ParameterGroupName: !Ref SampleParameterGroup
      SecurityGroupIds:
        - sg-xxxxxxxxxxxxxxxxx
        - sg-yyyyyyyyyyyyyyyyy
      SubnetGroupName: !Ref SampleSubnetGroup
      TLSEnabled: true
  SampleSubnetGroup:
    Type: AWS::MemoryDB::SubnetGroup
    Properties:
      SubnetGroupName: sample-subnet-group
      SubnetIds:
        - subnet-xxxxxxxxxxxxxxxxx
        - subnet-yyyyyyyyyyyyyyyyy
        - subnet-zzzzzzzzzzzzzzzzz
  SampleParameterGroup:
    Type: AWS::MemoryDB::ParameterGroup
    Properties:
      ParameterGroupName: sample-parameter-group
      Family: memorydb_redis6
  SampleACL:
    Type: AWS::MemoryDB::ACL
    Properties:
      ACLName: sample-acl
      UserNames:
        - !Ref SampleUser
  SampleUser:
    Type: AWS::MemoryDB::User
    Properties:
      UserName: sample-user
      AccessString:
        on ~* &* +@all
      AuthenticationMode: {
        Type: password,
        Passwords: [xxxxxxxxxxXXXXX!]
      }