Ensure regular security and operational updates are enabled for Azure Redis Cache

HIGH

Description

Regular updates for Azure Redis Cache are disabled, this may introduce unknown vulnerabilities.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to Azure Cache for Redis.
  2. Select the Redis Cache you wish to edit.
  3. Under Settings, select Schedule updates.
  4. Check the enable box and configure as needed.
  5. Save.

In Terraform -

  1. In the azurerm_redis_cache resource, configure a patch_schedule block.
  2. Set the day_of_week to the name of the preferred day.
  3. Set the start_hour_utc and maintenance_window if needed.

References:
https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/redis_cache#patch_schedule

Policy Details

Rule Reference ID: AC_AZURE_0393
CSP: Azure
Remediation Available: Yes
Resource Category: Database
Resource Type: Redis

Frameworks