Not only SSL are enabled for cache for Redis misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_91
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AZURE
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

SSL helps protect your data from unauthorized access or tampering by encrypting the data as it is transmitted between the Redis instance and the client. By enabling SSL, you can help ensure that only authorized users with the correct keys can access and decrypt the data, and that the data is protected while in transit.

How to Fix

Resource: azurerm_redis_cache

• Arguments: enable_non_ssl_port [source,go]

---

resource "azurerm_redis_cache" "example" { ...

• enable_non_ssl_port = false ... }

---