{
  "schema_version": 2,
  "id": "operate/rc/security",
  "title": "Security",
  "url": "https://redis.io/docs/latest/operate/rc/security/",
  "summary": "",
  "tags": [
    "docs",
    "operate",
    "rc"
  ],
  "last_updated": "2026-09-25T14:59:57+01:00",
  "children": [
    {
      "id": "operate/rc/security/access-control",
      "summary": "Control who can access the Redis Cloud console and databases.",
      "title": "Access control",
      "url": "https://redis.io/docs/latest/operate/rc/security/access-control/"
    },
    {
      "id": "operate/rc/security/shared-responsibility-model",
      "summary": "",
      "title": "Redis Cloud shared responsibility model",
      "url": "https://redis.io/docs/latest/operate/rc/security/shared-responsibility-model/"
    },
    {
      "id": "operate/rc/security/database-security",
      "summary": "",
      "title": "Cloud database security",
      "url": "https://redis.io/docs/latest/operate/rc/security/database-security/"
    },
    {
      "id": "operate/rc/security/cidr-whitelist",
      "summary": "The CIDR allow list permits traffic between a range of IP addresses and the Redis Cloud VPC.",
      "title": "Configure CIDR allow list",
      "url": "https://redis.io/docs/latest/operate/rc/security/cidr-whitelist/"
    },
    {
      "id": "operate/rc/security/encryption-at-rest",
      "summary": "Describes when data is encrypted at rest.",
      "title": "Encryption at rest",
      "url": "https://redis.io/docs/latest/operate/rc/security/encryption-at-rest/"
    },
    {
      "id": "operate/rc/security/aws-privatelink",
      "summary": "",
      "title": "Connect to Amazon Web Services PrivateLink",
      "url": "https://redis.io/docs/latest/operate/rc/security/aws-privatelink/"
    },
    {
      "id": "operate/rc/security/aws-transit-gateway",
      "summary": "",
      "title": "Connect to Amazon Web Services Transit Gateway",
      "url": "https://redis.io/docs/latest/operate/rc/security/aws-transit-gateway/"
    },
    {
      "id": "operate/rc/security/private-service-connect",
      "summary": "Private Service Connect creates a private endpoint that allows secure connections to Redis Cloud databases without exposing your application VPC.",
      "title": "Enable Google Cloud Private Service Connect",
      "url": "https://redis.io/docs/latest/operate/rc/security/private-service-connect/"
    },
    {
      "id": "operate/rc/security/vpc-peering",
      "summary": "VPC peering uses private IP addresses to route traffic between a Redis Cloud VPC and an application VPC.",
      "title": "Enable VPC peering",
      "url": "https://redis.io/docs/latest/operate/rc/security/vpc-peering/"
    },
    {
      "id": "operate/rc/security/manage-encryption-keys",
      "summary": "Learn how to use your own keys for persistent storage encryption on Redis Cloud.",
      "title": "Self-managed persistent storage encryption",
      "url": "https://redis.io/docs/latest/operate/rc/security/manage-encryption-keys/"
    }
  ],
  "page_type": "content",
  "content_hash": "e4a15bde6f0735e169d0928251bb3f8096f2263c28c284646c200a813ec013f8",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "Redis Cloud provides a number of ways to secure subscriptions and databases.\n\nAs a Redis Cloud user, consider these security domains:\n\n- The [Redis Cloud console](#admin-console-security)\n- [Your databases](https://redis.io/docs/latest/operate/rc/security/database-security)\n- The [Redis Cloud API](https://redis.io/docs/latest/operate/rc/api/get-started/enable-the-api)\n\nFirst, you might want to review our [shared responsibility model](https://redis.io/docs/latest/operate/rc/security/shared-responsibility-model) for security."
    },
    {
      "id": "admin-console-security",
      "title": "Redis Cloud console security",
      "role": "content",
      "text": "The Redis Cloud console is the web application you use to manage your Redis Cloud deployments. \n\nSecure access to the Redis Cloud console by:\n\n- Assigning appropriate roles to [team members with access](https://redis.io/docs/latest/operate/rc/security/access-control/access-management#team-management-roles).\n\n- Enabling [multi-factor authentication](https://redis.io/docs/latest/operate/rc/security/access-control/multi-factor-authentication).\n\n- Enabling [SAML SSO](https://redis.io/docs/latest/operate/rc/security/access-control/saml-sso).\n\n> [!NOTE]\n> A user session on Redis Cloud expires after 30 minutes. You'll be signed out of Redis Cloud after 30 minutes of inactivity."
    },
    {
      "id": "database-security",
      "title": "Database security",
      "role": "content",
      "text": "You have several options when it comes to securing your Redis Cloud databases. For more information, see [Cloud database security](https://redis.io/docs/latest/operate/rc/security/database-security). Options include:\n\n- [Encryption at rest](https://redis.io/docs/latest/operate/rc/security/encryption-at-rest)\n- [Role-based access control](https://redis.io/docs/latest/operate/rc/security/access-control/data-access-control/role-based-access-control)\n- [TLS](https://redis.io/docs/latest/operate/rc/security/database-security/tls-ssl)\n- [Network security](https://redis.io/docs/latest/operate/rc/security/database-security/network-security) using\n- [VPC peering](https://redis.io/docs/latest/operate/rc/security/vpc-peering) and [CIDR whitelist](https://redis.io/docs/latest/operate/rc/security/cidr-whitelist)"
    },
    {
      "id": "api-security",
      "title": "API security",
      "role": "content",
      "text": "The Redis Cloud API allows you to programmatically administer your subscriptions and database deployments. This API is disabled by default. When you [enable the API](https://redis.io/docs/latest/operate/rc/api/get-started/enable-the-api), you can then [manage the API keys](https://redis.io/docs/latest/operate/rc/api/get-started/manage-api-keys) for all owners of your Redis Cloud account. For an overview of the security features of the API, see the [API authentication documentation](https://redis.io/docs/latest/operate/rc/api/get-started)."
    },
    {
      "id": "continue-learning-with-redis-university",
      "title": "Continue learning with Redis University",
      "role": "content",
      "text": ""
    }
  ],
  "examples": []
}
