This rule checks whether specified high-risk commands are disabled for a Redis instance.
Risk level
Default risk level: High.
You can change the risk level as needed.
Detection logic
-
A Redis instance is considered compliant if specified high-risk commands are disabled.
Rule details
|
Parameter |
Description |
|
Rule name |
Specified high-risk commands are disabled for Redis instances |
|
Rule identifier |
|
|
Tag |
Redis |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Configuration changes |
|
Supported resource types |
ACS::Redis::DBInstance |
|
Input parameters |
disableRiskCommands (Default value: flushall,flushdb,keys,hgetall) |
Remediation
To make a non-compliant resource compliant, disable the specified high-risk commands. For more information, see Disable high-risk commands.