I noticed that when I set at_rest_encryption_enabled to false for aws_elasticache_replication_group and engine to valkey, it will show ‘Encryption at rest’ as enabled in the ElastiCache console.
This did not happen when I used redis as the engine. This seems odd. Could it be a bug?