---
id: "azure_cache_redis_key"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["secrets"]
langs: ["common"]
quality: 75
url: "https://registry.apicrafter.io/datatype/azure_cache_redis_key"
---

# Azure Cache for Redis access key (`azure_cache_redis_key`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

Access key of Azure Cache for Redis, used as the password in Redis connection strings. Keys in the identifiable format are 44 Base64 characters ending in = with the signature AzCa at positions 34 to 37. Older keys have no signature and are not covered. The regexp follows the pattern of the Microsoft security-utilities library; Microsoft Purview describes the same key.

- Parent datatype: `symmetric_key`
- Personal data (PII): no
- Categories: Secrets and credentials (passwords, keys, tokens) (secrets)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^[A-Za-z0-9+/]{33}AzCa[A-P][A-Za-z0-9+/]{5}=$
```

## Mappings

- purview: `Azure Redis cache connection string password`

## Supported by tools

- `datadogsds`
- `gitguardian`
- `githubsecretscanning`
- `microsoftpurview`

## Sources

- doc: <https://learn.microsoft.com/en-us/purview/sit-defn-azure-redis-cache-connection-string-password>
- other: <https://github.com/microsoft/security-utilities/blob/main/GeneratedRegexPatterns/PreciselyClassifiedSecurityKeys.json>

## Quality

Score 75/100. Missing: examples, negative example, translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/azure_cache_redis_key.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/azure_cache_redis_key.yaml>