cis-azure-database-2-10

name	cis-azure-database-2.10
description	Ensure 'Update Channel' is set to 'Stable'
category	cis-azure-database
version	2.0.0
author	cyberstrike-official
tags	["cis","azure","redis","cache"]
cis_id	2.10
cis_benchmark	CIS Microsoft Azure Database Services Benchmark v2.0.0
tech_stack	["azure"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

2.10 Ensure 'Update Channel' is set to 'Stable' (Automated)

Profile Applicability

• Level 1

Description

Ensure all Azure Cache for Redis instances are configured to use the stable update channel.

Rationale

By using the stable update channel, organizations minimize the risk of introducing issues that may exist in preview update streams. The stable update channel improves security posture and reduces exposure to vulnerabilities.

Impact

Updates and new features will take longer to arrive when using the stable update channel.

Audit Procedure

Audit from Azure Portal

1. Go to Azure Cache for Redis.
2. Select the name of a cache.
3. Under Settings, select Schedule updates.
4. Ensure Update Channel is set to Stable.
5. Repeat steps 1-4 for each cache.

Audit from Azure CLI

Run the following command to list caches:

az redis list

For each cache, run the following command to get the updateChannel setting:

az redis show --resource-group <resource-group> --name <cache> --query updateChannel

Ensure "Stable" is returned.

Audit from PowerShell

Run the following command to list caches:

Get-AzRedisCache

Run the following command to get the cache in a resource group with a given name:

$cache = Get-AzRedisCache -ResourceGroupName <resource-group> -Name <cache>

Run the following command to get the UpdateChannel setting:

$cache.UpdateChannel

Ensure Stable is returned.

Repeat for each cache.

Expected Result

The Update Channel should be set to Stable for each Azure Cache for Redis instance.

Remediation

Remediate from Azure Portal

1. Go to Azure Cache for Redis.
2. Select the name of a cache.
3. Under Settings, select Schedule updates.
4. Set to .