Great. How? Is that recommended? What kind of user rights I need to give redis to manage that instance in my vpc? How to lock that down to the minimum without breaking it? In that configuration, what risks do I have to control for otherwise? ...

That's a shame. I'm trying to not use Amazon, Google or Microsoft, so this means their solution probably won't work for me. Silly really.