Redis caches should have 'Minimum TLS version' set to 'Version 1.2'
This control checks whether 'Minimum TLS version' is set to 1.2. TLS 1.0 is a legacy version and has known vulnerabilities. This minimum TLS version can be configured to later protocols such as TLS 1.2.
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Azure Cache for Redis should be running TLS version 1.2 or newer" (f38646be-b908-491a-bc9b-fd507154f709); PowerPipe control azure_compliance.control.redis_cache_min_tls_1_2.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_148; KICS query "Beta - Redis Cache Not Using Latest TLS Encryption Version" (e22e5620-3679-418e-bb74-c9f71731ab0f).
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
redis_cache_min_tls_1_2 - Checkov Check:
CKV_AZURE_148 - Powerpipe Control:
azure_compliance.control.redis_cache_min_tls_1_2 - Azure Policy Definition:
f38646be-b908-491a-bc9b-fd507154f709 - KICS Query:
e22e5620-3679-418e-bb74-c9f71731ab0f
Last reviewed: 2026-10-14