> authorized networks ensure that the Redis instance is accessible only when connected to the authorized VPC network

That's good that this is handled smoothly as it's the way Redis wants auth to work.

I've always seen the security story to be one of the big weaknesses of Redis. No TLS, opt-in password with no user and only one shared password, no per-database privileges, etc.

Does anyone know the status of TLS in Redis? I heard somewhere that Amazon has a patch to add that directly, rather than having to use stunnel.