diff --git a/infrastructure/terraform/modules/core-services/main.tf b/infrastructure/terraform/modules/core-services/main.tf
index de50a78606..8f3b9d123b 100644
--- a/infrastructure/terraform/modules/core-services/main.tf
+++ b/infrastructure/terraform/modules/core-services/main.tf
@@ -79,6 +79,15 @@ resource "aws_security_group" "ecs_tasks_rds_instances" {
   }
 }
 
+resource "aws_elasticache_subnet_group" "core_valkey" {
+  name       = "${var.cluster_info.name}-core-valkey-${var.cluster_info.environment}"
+  subnet_ids = var.cluster_info.private_subnet_ids
+
+  tags = {
+    Name = "subnet group for core valkey cache instances"
+  }
+}
+
 resource "aws_security_group" "core_valkey" {
   name   = "${var.cluster_info.name}-sg-core-valkey-${var.cluster_info.environment}"
   vpc_id = var.cluster_info.vpc_id
@@ -97,10 +106,12 @@ resource "aws_elasticache_replication_group" "core_valkey" {
   description          = "Core cache instance"
   node_type            = "cache.t4g.medium"
   engine               = "valkey"
+  subnet_group_name    = aws_elasticache_subnet_group.core_valkey.name
 
   num_cache_clusters   = 1
   parameter_group_name = "default.valkey8"
   port                 = 6379
+  security_group_ids   = [aws_security_group.core_valkey.id]
 }
 
 # resource "aws_elasticache_parameter_group" "core_valkey" {
diff --git a/infrastructure/terraform/modules/deployment/main.tf b/infrastructure/terraform/modules/deployment/main.tf
index f7c5cffce7..10a9dd6ab9 100644
--- a/infrastructure/terraform/modules/deployment/main.tf
+++ b/infrastructure/terraform/modules/deployment/main.tf
@@ -167,6 +167,7 @@ module "service_bastion" {
       { name = "SUPABASE_URL", value = var.NEXT_PUBLIC_SUPABASE_URL },
       { name = "HOSTNAME", value = var.HOSTNAME },
       { name = "PAGER", value = "less -S" },
+      { name = "VALKEY_URL", value = "redis://${module.core_dependency_services.valkey_url}" }
     ]
 
     secrets = [