Azure Cache for Redis
Azure Cache for Redis done cheap by default - the Basic C0 tier with TLS 1.2 minimum and the non-SSL port disabled - scaling cleanly up to Standard and Premium via precondition-guarded inputs.
Part of: Azure Production Landing Zone
Verification
Plan-validatedPassed: module logic verified on a mocked plan - inputs, validation rules, conditional creation and outputs resolve (no real provider, no cloud).
Conformance
- Static validation (fmt · validate · tflint)
- Security scan clean (Checkov)
- Plan tests (mocked: validation rules · outputs)
Provenance
- SHA-256 checksum
- Cosign signature
Functional
- Live test pending (no cloud run yet)
Last verified 2026-07-04 · how we verify
Verify this download
cosign · sha-256Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.
# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub
# 2. This module's Sigstore bundle
curl -o azure-redis-cache-1.0.0.sigstore.json \
https://www.iac-bazaar.com/api/artifacts/azure-redis-cache/signature
# 3. Verify the tarball you downloaded
cosign verify-blob \
--key cosign.pub \
--bundle azure-redis-cache-1.0.0.sigstore.json \
azure-redis-cache-1.0.0.tar.gz
# → Verified OK
# 4. (optional) confirm the checksum too
echo "d747b0f0799954cab7ae9382ac965736acd89f12d044410a6d44bcef0856aab0 azure-redis-cache-1.0.0.tar.gz" | sha256sum -cUse it from the registry
terraform · opentofumodule "redis_cache" {
source = "www.iac-bazaar.com/iac-bazaar/azure-redis-cache/azure"
version = "1.0.0"
}Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.
Inputs & outputs
Create a free account to read this module's contract
The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.
A free account sees the contract of every Free module. This one is Premium, so its contract unlocks when you buy it.
Documentation
azure-redis-cache
Status: static-validated, live-test pending. Ships under live-test quarantine until promoted by the Azure live lane. Schema is validated against the azurerm v4 provider docs. Note: Azure Cache for Redis provisions slowly — a single Basic/Standard cache typically takes ~15-20 minutes to create (and a similar time to delete), so plan apply/destroy windows accordingly.
Azure Cache for Redis (managed Redis) done right and cheap by default: the
Basic C0 tier (250 MB, single node) with TLS 1.2 minimum, the plaintext
non-SSL port disabled (TLS-only on 6380) and access-key authentication on.
The module consumes an existing resource group and scales cleanly up to
Standard (replicated, 99.9% SLA) and Premium (VNet injection, clustering,
zones, scheduled patching) via optional inputs guarded by fail-fast
preconditions. Works with Terraform and OpenTofu (>= 1.6), azurerm
provider >= 4.0, < 5.0.
Secure defaults
- TLS 1.2 minimum (
minimum_tls_version = "1.2"); 1.0/1.1 are deprecated. - No plaintext port (
non_ssl_port_enabled = false) — clients use the TLS port (ssl_port, 6380) only. - Access-key authentication on (the provider default; only disabled for Entra-ID-only Premium caches, which this module does not target).
- Encryption in transit via TLS; data at rest is encrypted by the platform.
License
Commercial — LicenseRef-IaCBazaar-Commercial
Usage code & full reference unlock after purchase
The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.
- Usage
- Inputs
- Outputs
- Requirements & notes
Related modules
Azure Cosmos DB Account
Cosmos DB (NoSQL or MongoDB API) with multi-region failover, autoscale throughput, private endpoint and backup policy.
Azure SQL Database
Logical SQL server + database with Entra-only auth, firewall/private endpoint, auditing, TDE and failover-group option.
MySQL Flexible Server
Azure Database for MySQL Flexible Server with TLS required by default, correct delegated-subnet + private DNS zone ordering, an Entra administrator, databases, and cheapest-by-default Burstable sizing.
PostgreSQL Flexible Server
Flexible Server with HA option, private VNet delegation, Entra auth, firewall and tuned server parameters.