Sign in
Menu
Sign up
Docs
Azure compliance controlsAzure Cache for Redis

Azure Cache for Redis should use standard SKUs as a minimum

Basic or Free SKUs have significant limitations in what can be monitored and what support can be realized from Microsoft. Typically, these SKU's do not have a service SLA. Basic/Free SKUs should never be used for production workloads.

Typically, these SKU's do not have a service SLA and Microsoft will usually refuse to provide support for them. Basic/Free SKUs should never be used for production workloads.

What this control checks

Fails Azure Cache for Redis instances that use the Basic SKU

Audit evidence

Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.redis_cache_no_basic_sku.

Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_230.

Framework-specific interpretation

CIS Azure Benchmark v2.0.0: Mapped to 5.5 (Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production...).

CIS Azure Benchmark v2.1.0: Mapped to 5.5 (Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production...).

CIS Azure Benchmark v3.0.0: Mapped to 6.5 (Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production...).

Framework mappings

The clauses this control is mapped to in each framework.

CIS Azure Benchmark v2.0.0

  • 5.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)

CIS Azure Benchmark v2.1.0

  • 5.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)

CIS Azure Benchmark v3.0.0

  • 6.5 Ensure that SKU Basic/Consumption is not used on artifacts that need to be monitored (Particularly for Production Workloads)

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: redis_cache_no_basic_sku
  • Checkov Check: CKV_AZURE_230
  • Powerpipe Control: azure_compliance.control.redis_cache_no_basic_sku

Last reviewed: 2026-10-14

View all Azure controls →

On this page

Ask AI about this

Help improve this page