AzPolicyAdvertizer

last sync: 2023-Jun-01 17:45:04 UTC

Azure Landing Zones (ALZ) Policy definition

Azure Cache for Redis only secure connections should be enabled

Name Azure Cache for Redis only secure connections should be enabled
Azure Landing Zones (ALZ) GitHub
JSON Deny-Redis-http
Id Deny-Redis-http
Version 1.0.0
details on versioning
Category Cache
Microsoft docs
Description Audit enabling of only connections via SSL to Azure Cache for Redis. Validate both minimum TLS version and enableNonSslPort is disabled. Use of secure connections ensures authentication between the server and the service and protects data in transit from network layer attacks such as man-in-the-middle, eavesdropping, and session-hijacking
Mode Indexed
Type Custom Azure Landing Zones (ALZ)
Preview FALSE
Deprecated FALSE
Effect Default
Deny
Allowed
Audit, Deny, Disabled
Used RBAC Role none
Rule Aliases IF (2)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.Cache/Redis/enableNonSslPort Microsoft.Cache Redis properties.enableNonSslPort true
Microsoft.Cache/Redis/minimumTlsVersion Microsoft.Cache Redis properties.minimumTlsVersion true
Rule ResourceTypes IF (1)
Microsoft.Cache/redis
History none
Used in Initiatives
Initiative DisplayName Initiative Id Initiative Category State
Deny or Deploy and append TLS requirements and SSL enforcement on resources without Encryption in transit Enforce-EncryptTransit Encryption GA
JSON