compliance.tf
Azure Compliance ControlsAzure Cache for Redis

Azure Cache for Redis should allow only secure connections

Audit enabling of only connections via SSL to Azure Cache for Redis. Use of secure connections ensures authentication between the server and the service and protects data in transit from man-in-the-middle, eavesdropping, and session-hijacking.

What this control checks

Azure Cache for Redis must be configured to allow only secure connections

Framework mappings

The clauses this control is mapped to in each framework.

NIST SP 800-53 Rev 5

  • SC-8(1): Cryptographic Protection
  • Transmission Confidentiality And Integrity (SC-8)

NIST SP 800-171 Rev 2

  • 3.13.8: Implement cryptographic mechanisms to prevent unauthorized disclosure of CUI during transmission unless otherwise protected by alternative physical safeguards.

FedRAMP High

  • SC-8 Transmission Confidentiality And Integrity
  • SC-8(1) Cryptographic Or Alternate Physical Protection

HIPAA HITRUST v9.2

  • 0809.01n2Organizational.1234-01.n 01.04 Network Access Control
  • 0810.01n2Organizational.5-01.n 01.04 Network Access Control
  • 0811.01n2Organizational.6-01.n 01.04 Network Access Control
  • 0812.01n2Organizational.8-01.n 01.04 Network Access Control
  • 0814.01n1Organizational.12-01.n 01.04 Network Access Control
1 more clause
  • 1451.05iCSPOrganizational.2-05.i 05.02 External Parties

PCI DSS v3.2.1

  • 6.5.3: Insecure cryptographic storage.
  • Render PAN unreadable anywhere it is stored (including on portable digital media, backup media, and in logs) by using approaches like one-way hashes based on strong cryptography, truncation etc
  • Use strong cryptography and security protocols to safeguard sensitive cardholder data during transmission over open, public networks

Tool mappings

Use these identifiers to cross-reference this control across tools, reports, and evidence.

  • Compliance.tf Control: redis_cache_ssl_enabled
  • Checkov Check: CKV_AZURE_91
  • Powerpipe Control: azure_compliance.control.redis_cache_ssl_enabled
  • Azure Policy Definitions: 22bee202-a82f-4305-9a2a-6d7f44d4dedb, 766f5de3-c6c0-4327-9f4d-042ab8ae846c
  • KICS Query: e29a75e6-aba3-4896-b42d-b87818c16b58

Last reviewed: 2026-10-14

View all Azure controls →

On this page

Ask AI about this

Help improve this page