Skip to main content

Redis Authentication Mode Enabled

ID: rule:aliyun:redis-instance-open-auth-mode
Severity: high
IaC Types: ROS, Terraform

Description​

Ensures Redis instances require authentication and are not in 'no-password' mode.

Reason for Violation​

Disabling authentication allows anyone with network access to read or modify your Redis data.

Recommendation​

Set vpc_auth_mode to "Open" to enable password authentication for the Redis instance.

Resource Types​

  • ROS: ALIYUN::REDIS::Instance
  • Terraform: alicloud_kvstore_instance