Azure Cache for Redis should be in a virtual network
Checks that Azure Cache for Redis resides within a virtual network. An instance configured with a virtual network is not publicly addressable and can only be accessed from virtual machines and applications within the virtual network.
Azure Virtual Network deployment provides enhanced security and isolation for your Azure Cache for Redis, as well as subnets, access control policies, and other features to further restrict access. When an Azure Cache for Redis instance is configured with a virtual network, it is not publicly addressable and can only be accessed from virtual machines and applications within the virtual network.
What this control checks
Passes when the Redis cache has a subnet_id; fails (alarm) when it is not in a virtual network.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.redis_cache_in_virtual_network.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
redis_cache_in_virtual_network - Powerpipe Control:
azure_compliance.control.redis_cache_in_virtual_network
Last reviewed: 2026-10-14