Redis Cloud Account Key
Service Name: Redis Cloud
Service Description: Redis Cloud is a fully-managed cloud service for Redis, offering high availability, scalability, and enterprise-grade security for Redis databases.
Service Address: [https://redis.com/redis-enterprise-cloud/](https://redis.com/redis-enterprise-cloud/)
Redis Cloud Account Key
REDIS_CLOUD_ACCOUNT_KEY
-
Validation Type: API Auth
-
IP Allow list: Does not exist
-
Secret Access Scope: Grants administrative access to Redis Cloud account resources and databases.
-
Secret Revokement URL: Does not exist
-
Secret Example:
A1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z6789012 -
Suspicious Activity Investigation Instructions:
-
Review Redis Cloud audit logs for unauthorized database access or modifications
-
Check for unusual database operations or unexpected traffic patterns
-
Monitor for unauthorized creation of new databases or subscription changes
-
Verify if there are any unexpected changes to database configurations
-
Look for unusual API calls made with the account key
-
-
Mitigation Instructions:
-
Log in to your Redis Cloud account dashboard
-
Navigate to the account settings or API Keys section
-
Revoke the compromised account key immediately
-
Generate a new account key if needed
-
Update all applications and services using the old key with the new key
-
Review and update access controls for your Redis Cloud resources
-
Enable additional security features like IP restrictions if available
-