AzureFeeds

Azure Managed Redis announced during Microsoft Ignite 2024 in Public Preview.

This is a new, fully-managed, first-party Redis offering in Microsoft Azure. Azure Managed Redis is available today in public preview. Microsoft Azure is the first major cloud service provider to offer customers a licensed, multi-tiered Redis service.

This article will show you how to deploy an Azure Managed Redis instance using Bicep. Bicep is a Domain Specific Language (DSL) for deploying Azure resources declaratively. It aims to drastically simplify the authoring experience with a cleaner syntax and better support for modularity and code reuse.

In this example, I have deployed Azure Managed Redis using Bicep, with bonus code snippets for connecting API Management to the Azure Managed Redis.

The Bicep file creates a new Azure Managed Redis instance.

Redis Enterprise Cache Setup

• Resource Type: Microsoft.Cache/redisEnterprise
• API Version: 2024-09-01-preview
• Name: redisEnterprise
• Location: Uses a variable location
• Tags: Uses a variable tags
• SKU: Specifies the SKU as MemoryOptimized_M10
• Properties: Sets the minimum TLS version to 1.2

// Redis Enterprise Cache setup
resource redisEnterprise 'Microsoft.Cache/redisEnterprise@2024-09-01-preview' = {
  name: 'redisEnterprise'
  location: location
  tags: tags
  sku: {
    name: 'MemoryOptimized_M10'
  }
  properties: {
    minimumTlsVersion: '1.2'
  }
}

output redisEnterpriseName string = redisEnterprise.name

This part of the Bicep file sets up a Redis Enterprise Cache instance with specific configurations such as location, tags, SKU, and minimum TLS version.

Redis Cache Database Setup

• Resource Type: Microsoft.Cache/redisEnterprise/databases
• API Version: 2024-09-01-preview
• Name: default
• Parent: Links to the redisEnterprise resource defined earlier
  Properties:
• Access Keys Authentication: Disabled
• Eviction Policy: No eviction
• Clustering Policy: Enterprise cluster
• Modules: Includes the RediSearch module
• Port: Sets the port to 10000

resource redisCache 'Microsoft.Cache/redisEnterprise/databases@2024-09-01-preview' = {
  name: 'default'
  parent: redisEnterprise
  properties: {
    accessKeysAuthentication: 'Disabled'
    evictionPolicy: 'NoEviction'
    clusteringPolicy: 'EnterpriseCluster'
    modules: [
      {
        name: 'RediSearch'
      }
    ]
    port: 10000
  }
}

This part sets up a Redis Cache Database within the Redis Enterprise Cache instance. It configures properties such as access key authentication, eviction policy, clustering policy, modules, and port.

You can also link API Management to the Azure Managed Redis resource as a bonus. This is a small snippet of the Connection string for API Management:

redisCacheConnectionString: '${redisEnterprise.properties.hostName}:${10000},ssl=True,abortConnect=False'

This is using Entra ID authentication to connect to the Redis Cache using the following role assignment to the API System Managed Identity:

// Redis Access Policy Assignment
resource redisAccessPolicyAssignmentName 'Microsoft.Cache/redisEnterprise/databases/accessPolicyAssignments@2024-09-01-preview' = {
  name: take('cachecontributor${uniqueString(resourceGroup().id)}', 24)
  parent: redisCache
  properties: {
    accessPolicyName: 'default'
    user: {
      objectId: apim.outputs.apimPrincipalId
    }
  }
}