[RULE] Use Microsoft Entra ID for Azure Cache for Redis

[BenjaminEngeset]

Existing rule

No response

Suggested rule

Azure Cache for Redis provides two authentication methods for accessing cache instances: access keys and Microsoft Entra ID (formerly Azure Active Directory).

To enable Microsoft Entra ID authentication, set the properties.redisConfiguration.aad-enabled property to True.

However, it’s important to note that it is currently not possible to completely disable local authentication methods (access keys). Therefore, while configuring this setting, it is recommended to prioritize and use the Microsoft Entra ID authentication method to enhance security.

Pillar

Security

Additional context

https://learn.microsoft.com/azure/azure-cache-for-redis/cache-azure-active-directory-for-authentication