Environment suffix appended to the userId / userName. Typically
pulumi.getStack().
OptionalgroupThe association made before this one. ElastiCache refuses a change to a
group that is still modifying, so memberships are made one at a time.
OptionalpasswordSet for a workload: the user logs in by password, rotated on apply, and its login is published to valkeyUrlParameterName. Omitted, the user logs in with an IAM token, as operators and CI do.
Optionalafter?: Resource[]Users this one changes after. Left out, users change together.
The cluster's primary endpoint, for the url.
Optionalnow?: InstantThe clock. Defaults to now; a test passes its own.
Shared Valkey user group ID from cfx-valkey (exported as
valkeyUserGroupId). The created user is associated with this group
via aws.elasticache.UserGroupAssociation; the group is declared with
ignoreChanges: ["userIds"] upstream so the association doesn't fight
over membership.
Logical workload identifier (e.g. product-api, cfx-ops). Used as
both the ElastiCache userId and userName — they must be equal for
IAM auth. The env suffix is appended automatically to keep userIds
unique across environments (e.g. product-api-dev).
Redis ACL access string: a workload's from
valkeyAccessString, a tier's fromVALKEY_OPS_ACCESS_STRING/VALKEY_DEVELOPER_ACCESS_STRING.