[Elasticache] - Support enabling Encryption in transit on existing clusters

[dhumphries-sainsburys]

What problem are you facing?

Redis 7.0 onwards supports enabling encryption in transit on an existing cluster or replication group but this doesn't seem to be allowed in the provider with the below:

        async update failed: refuse to update the external resource: cannot
        change the value of the argument "transit_encryption_enabled" from
        "false" to "true"

[1]
[2]

How could Official AWS Provider help solve your problem?

Support the ability to switch between encrypted transit being false to true

[turkenf]

Hi @dhumphries-sainsburys,

Changing this field requires deleting and recreating the existing resource due to the behavior of the underlying provider.

• transit_encryption_enabled for Cluster resource
• transit_encryption_enabled for ReplicationGroup resource

According to the Crossplane Resource Model, this is something we do not allow.

[turkenf]

Since this is to be expected, I am closing this issue. Upstream issue with rejecting change requests for immutable fields.

[dhumphries-sainsburys]

Now this is supported upstream is this now supported by the provider?