diff --git a/main.tf b/main.tf
index 4605da9..a2f056e 100644
--- a/main.tf
+++ b/main.tf
@@ -78,6 +78,9 @@ resource "aws_elasticache_replication_group" "default" {
   # https://docs.aws.amazon.com/AmazonElastiCache/latest/red-ug/in-transit-encryption.html
   transit_encryption_enabled = var.transit_encryption_enabled
 
+  # The password used to access a password protected server. Can be specified only if transit_encryption_enabled = true
+  auth_token = var.auth_token == null ? null : var.auth_token
+
   # If true, this parameter causes the modifications in this request and any pending modifications to be applied,
   # asynchronously and as soon as possible, regardless of the maintenance_window setting for the replication group.
   # apply_immediately applies only to modifications in node type, engine version, and changing the number of nodes in a cluster.
diff --git a/variables.tf b/variables.tf
index 9be4257..5e5883b 100644
--- a/variables.tf
+++ b/variables.tf
@@ -99,3 +99,9 @@ variable "tags" {
   type        = map(string)
   description = "A mapping of tags to assign to all resources."
 }
+
+variable "auth_token" {
+  default     = null
+  type        = string
+  description = "Access token for CLI."
+}