Details of Encryption Algorithm and Access to Internal Cache in Azure API Management

Question

I would like to know the details regarding the encryption algorithm used for the internal cache in Azure API Management. Additionally, can you provide information on the frequency of key rotation and the individuals or roles responsible for managing and accessing this cache? If any published links exist that provide this information, please share them.

Thank you for your assistance.

Kind regards,

Luis

Answer 1

@Lopez Alonso, Luis Thanks for reaching out. APIM internal cache is Redis and is stored in memory only and it doesn't get encrypted. You can use external cache and implement encryption (which is a feature in preview): https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-how-to-encryption

https://techcommunity.microsoft.com/t5/azure-paas-blog/encryption-on-azure-cache-for-redis/ba-p/1800449

let me know if you have any further queries.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.