AWS ElastiCache Burstable Node CPU Credit Balance Depletion Sentinel

id: aws-elasticache-cpu-credit-depletion-sentinel
namespace: company.cloud

inputs:
  - id: aws_region
    type: STRING
    defaults: "us-east-1"
    description: Target AWS region.
  - id: cache_cluster_id
    type: STRING
    description: Amazon ElastiCache cluster identifier (e.g., redis-prod-001).
  - id: min_credit_balance
    type: FLOAT
    defaults: 20.0
    description: Minimum acceptable CPU credit balance before triggering depletion warning.

tasks:
  - id: query_elasticache_credits
    type: io.kestra.plugin.aws.cli.AwsCLI
    region: "{{ inputs.aws_region }}"
    accessKeyId: "{{ secret('AWS_ACCESS_KEY_ID') }}"
    secretKeyId: "{{ secret('AWS_SECRET_ACCESS_KEY') }}"
    commands:
      - |
        START_TIME=$(date -u -v-30M +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u -d "30 minutes ago" +%Y-%m-%dT%H:%M:%SZ)
        END_TIME=$(date -u +%Y-%m-%dT%H:%M:%SZ)

        aws cloudwatch get-metric-data           --metric-data-queries '[{"Id":"cred","MetricStat":{"Metric":{"Namespace":"AWS/ElastiCache","MetricName":"CPUCreditBalance","Dimensions":[{"Name":"CacheClusterId","Value":"{{ inputs.cache_cluster_id }}"}]},"Period":300,"Stat":"Minimum"}}]'           --start-time "$START_TIME"           --end-time "$END_TIME"           --output json > /tmp/elasticache_credits.json

        CREDIT_BALANCE=$(jq '.MetricDataResults[0].Values[0] // 1000' /tmp/elasticache_credits.json)

        echo "::set-output name=credit_balance::$CREDIT_BALANCE::"

  - id: evaluate_credit_depletion
    type: io.kestra.plugin.core.flow.If
    condition: "{{ outputs.query_elasticache_credits.vars.credit_balance | float <
      inputs.min_credit_balance }}"
    then:
      - id: notify_cache_team
        type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
        url: "{{ secret('SLACK_WEBHOOK') }}"
        payload: |
          {
            "channel": "#infrastructure-alerts",
            "attachments": [
              {
                "color": "danger",
                "title": "🚨 AWS ElastiCache CPU Credit Balance Depletion Alert",
                "text": "ElastiCache cluster `{{ inputs.cache_cluster_id }}` CPU credit balance has dropped to *{{ outputs.query_elasticache_credits.vars.credit_balance }}* (warning threshold: {{ inputs.min_credit_balance }}). Impact: Burstable cache node (t2/t3/t4g) will be severely CPU throttled to baseline performance, spiking Redis/Memcached command latencies and breaking web session caching.",
                "footer": "Kestra Cloud Sentinel • AWS ElastiCache"
              }
            ]
          }

errors:
  - id: alert_pipeline_failure
    type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
    url: "{{ secret('SLACK_WEBHOOK') }}"
    payload: |
      {
        "channel": "#infrastructure-alerts",
        "attachments": [
          {
            "color": "danger",
            "title": "⚠️ ElastiCache Credit Sentinel Execution Failed",
            "text": "The ElastiCache CPU credit CloudWatch query failed. Please verify AWS credentials and cluster ID.",
            "footer": "Kestra Workflow Failure Sentinel"
          }
        ]
      }

triggers:
  - id: periodic_schedule
    type: io.kestra.plugin.core.trigger.Schedule
    cron: "*/15 * * * *"
    disabled: true
    inputs:
      cache_cluster_id: replace-with-your-cache-cluster-id