Azure Cache for Redis

azure-redis-cache

Status: static-validated, live-test pending. Ships under live-test quarantine until promoted by the Azure live lane. Schema is validated against the azurerm v4 provider docs. Note: Azure Cache for Redis provisions slowly — a single Basic/Standard cache typically takes ~15-20 minutes to create (and a similar time to delete), so plan apply/destroy windows accordingly.

Azure Cache for Redis (managed Redis) done right and cheap by default: the Basic C0 tier (250 MB, single node) with TLS 1.2 minimum, the plaintext non-SSL port disabled (TLS-only on 6380) and access-key authentication on. The module consumes an existing resource group and scales cleanly up to Standard (replicated, 99.9% SLA) and Premium (VNet injection, clustering, zones, scheduled patching) via optional inputs guarded by fail-fast preconditions. Works with Terraform and OpenTofu (>= 1.6), azurerm provider >= 4.0, < 5.0.

Secure defaults

• TLS 1.2 minimum (minimum_tls_version = "1.2"); 1.0/1.1 are deprecated.
• No plaintext port (non_ssl_port_enabled = false) — clients use the TLS port (ssl_port, 6380) only.
• Access-key authentication on (the provider default; only disabled for Entra-ID-only Premium caches, which this module does not target).
• Encryption in transit via TLS; data at rest is encrypted by the platform.

Verification

Static-validated (tofu fmt, tofu validate, tflint, checkov). Live apply/verify/destroy testing pending an Azure sandbox subscription — see catalog status.

License

Commercial — LicenseRef-IaCBazaar-Commercial