| name | cis-azure-database-2.10 |
| description | Ensure 'Update Channel' is set to 'Stable' |
| category | cis-azure-database |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","azure","redis","cache"] |
| cis_id | 2.10 |
| cis_benchmark | CIS Microsoft Azure Database Services Benchmark v2.0.0 |
| tech_stack | ["azure"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
2.10 Ensure 'Update Channel' is set to 'Stable' (Automated)
Profile Applicability
Description
Ensure all Azure Cache for Redis instances are configured to use the stable update channel.
Rationale
By using the stable update channel, organizations minimize the risk of introducing issues that may exist in preview update streams. The stable update channel improves security posture and reduces exposure to vulnerabilities.
Impact
Updates and new features will take longer to arrive when using the stable update channel.
Audit Procedure
Audit from Azure Portal
- Go to
Azure Cache for Redis.
- Select the name of a cache.
- Under Settings, select Schedule updates.
- Ensure
Update Channel is set to Stable.
- Repeat steps 1-4 for each cache.
Audit from Azure CLI
Run the following command to list caches:
az redis list
For each cache, run the following command to get the updateChannel setting:
az redis show --resource-group <resource-group> --name <cache> --query updateChannel
Ensure "Stable" is returned.
Audit from PowerShell
Run the following command to list caches:
Get-AzRedisCache
Run the following command to get the cache in a resource group with a given name:
$cache = Get-AzRedisCache -ResourceGroupName <resource-group> -Name <cache>
Run the following command to get the UpdateChannel setting:
$cache.UpdateChannel
Ensure Stable is returned.
Repeat for each cache.
Expected Result
The Update Channel should be set to Stable for each Azure Cache for Redis instance.
Remediation
Remediate from Azure Portal
- Go to
Azure Cache for Redis.
- Select the name of a cache.
- Under Settings, select Schedule updates.
- Set to .