PSRule.Rules.Azure

0.3.0

rules/Azure.Redis.Rule.ps1

                                #

# Validation rules for Azure Redis Cache

#

# Synopsis: Redis Cache should only accept secure connections

Rule 'Azure.Redis.NonSslPort' -If { ResourceType 'Microsoft.Cache/Redis' } -Tag @{ severity = 'Critical'; category = 'Security configuration' } {

    $TargetObject.properties.enableNonSslPort -eq $False

}

# Synopsis: Redis Cache should reject TLS versions older then 1.2

Rule 'Azure.Redis.MinTLS' -If { ResourceType 'Microsoft.Cache/Redis' } -Tag @{ severity = 'Critical'; category = 'Security configuration' } {

    $TargetObject.properties.minimumTlsVersion -eq '1.2'

}