Redis Cache allows to disable, rename possibly harmful commands FLUSHALL, FLUSHDB, etc.
We use Azure Cache for Redis where:
- You cannot change all settings, because config is managed by Microsoft
- You do not have a direct access to redis.conf: only via Azure Portal or via shell but for the same set of settings.
- Not all commands are supported like CONFIG, SAVE, ACL, etc
- ACL feature is not supported in Azure Cache for Redis 6
The problem:
The same Redis Db is used by many apps using different key prefixes. Anyone can connect to that Redis Db (ex: dev env) via some UI Client and accidentally execute FLUSHALL and erase all data. And we even do not know who it was.
Question:
Is their a possibility to restrict, disable, rename FLUSHALL command to prevent accidental usage?