Currently, any auth_token changes are destroying and are recreating Redis cluster. AWS API has option to set new token and chose update strategy: SET or ROTATE https://docs.aws.amazon.com/AmazonElastiCache/latest/APIReference/API_ModifyCacheCluster.html