Interface ValkeyWorkloadUserArgs

Redis ACL access string. Defaults to on ~* &* +@all -@admin -@dangerous +info — +info is required by valkey-glide (it runs INFO on connect; INFO is in @dangerous). &* (all channels) is auto-added by ElastiCache; bake it in to avoid perpetual drift on the accessString field.

Environment suffix appended to the userId / userName. Typically pulumi.getStack().

Shared Valkey user group ID from cfx-valkey (exported as valkeyUserGroupId). The created user is associated with this group via aws.elasticache.UserGroupAssociation; the group is declared with ignoreChanges: ["userIds"] upstream so the association doesn't fight over membership.

Logical workload identifier (e.g. product-api, cfx-ops). Used as both the ElastiCache userId and userName — they must be equal for IAM auth. The env suffix is appended automatically to keep userIds unique across environments (e.g. product-api-dev).