Skip to content

Redis Cloud User Key

Service Name: Redis Cloud

Service Description: Redis Cloud is a fully managed, cloud-based Redis service that provides high availability, scalability, and performance for Redis databases.

Service Address: https://redis.com/redis-enterprise-cloud/overview/

Redis Cloud User Key

REDIS_CLOUD_USER_KEY

  • Validation Type: API Auth

  • IP Allow list: Does not exist

  • Secret Access Scope: Grants programmatic access to Redis Cloud resources and management capabilities.

  • Secret Revokement URL: Does not exist

  • Secret Example: S1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7q8r9s0t1u2v3w4x5y6z7a8b9c0d

  • Suspicious Activity Investigation Instructions:

  • Check Redis Cloud audit logs for unauthorized database access or configuration changes
  • Review API call history for unusual patterns or unauthorized operations
  • Monitor for unexpected database creation, deletion, or modification

  • Check for unusual traffic patterns or data access from unfamiliar locations

  • Mitigation Instructions:

  • Log in to the Redis Cloud console
  • Navigate to the Account Settings section
  • Select the API Keys tab
  • Locate the compromised key and delete it
  • Generate a new API key with appropriate permissions
  • Update all legitimate applications to use the new key
  • Review and update access policies to enforce the Principle of Least Privilege