Enable In-Transit Encryption for Redis Cache Servers
More Info:
Ensure that in-transit encryption is enabled for all Microsoft Azure Redis Cache servers.Risk Level
HighAddress
SecurityCompliance Standards
ISO27001, HIPAA, SOC2, GDPR, NISTCSF, PCIDSS, FedRAMPTriage and Remediation
Remediation
Using Console
Using Console
Sure, here are the step-by-step instructions to remediate the misconfiguration of enabling in-transit encryption for Redis Cache Servers in Azure:
- Login to your Azure portal and navigate to the Redis Cache Server that needs to be remediated.
- Click on the “Configuration” tab from the left-hand side menu.
- Scroll down to the “Security” section and click on the “Edit” button.
- Under the “Transport Security Settings” section, select the “Enable SSL” option.
- Click on the “Save” button to save the changes.
- Once the changes are saved, the Redis Cache Server will be configured to use in-transit encryption using SSL.
- Verify the changes by connecting to the Redis Cache Server using a Redis client and checking if the connection is encrypted using SSL.
Using CLI
Using CLI
To enable In-Transit Encryption for Redis Cache Servers in AZURE using AZURE CLI, follow these steps:
- Open the Azure CLI on your local machine or Azure Cloud Shell.
-
Login to your Azure account using the command:
-
Select the subscription you want to work with using the command:
-
Check the current encryption status of your Redis Cache Server using the command:
If the output is “true”, it means that In-Transit Encryption is not enabled.
-
Enable In-Transit Encryption for Redis Cache Server using the command:
This will disable non-SSL port and enable In-Transit Encryption for Redis Cache Server.
-
Verify the encryption status again using the command:
The output should be “false”, indicating that In-Transit Encryption is now enabled for Redis Cache Server.
Using Python
Using Python
To enable in-transit encryption for Redis Cache servers in AZURE using Python, you can follow the below steps:Note: Replace
- Import the required libraries:
- Authenticate and create a Redis Cache Management Client:
- Get the Redis Cache instance:
- Update the Redis Cache instance to enable in-transit encryption:
subscription_id, resource_group_name, redis_cache_name, and your_redis_password with the actual values.This will enable in-transit encryption for the Redis Cache instance in AZURE.