Azure Redis Cache does not use the latest version of TLS encryption misconfiguration detected in cod

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_148
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	LOW
Framework	Terraform

Impact

Disabling the public network access properly improves security by ensuring your Azure AKS cluster nodes can only be accessed from a non-public IP address.

How to Fix

Resource: azurerm_kubernetes_cluster

• Arguments: enable_node_public_ip (default is "false") [source,go]

---

resource "azurerm_redis_cache" "pass" { name = "timeout-redis" location = "West Europe" resource_group_name = azurerm_resource_group.example_rg.name subnet_id = azurerm_subnet.example_redis_snet.id

family = "P" capacity = 1 sku_name = "Premium" shard_count = 1

enable_non_ssl_port = false minimum_tls_version = "1.2" public_network_access_enabled = true

redis_configuration { enable_authentication = true maxmemory_policy = "volatile-lru" } }