Is there any way to enable Authentication and authorization for Google Memorystore?

Question

I am using Google Memorystore for Redis for our in-memory datastore and I am processing dataflow pipeline for processing and transforming input files and storing the processed data in Google Memorystore.

But is there any way we can enable authentication and authorization for memorystore so that other applications can access with token or other authentication mechanism?

I didn't get much info from the official documentation. However, I got the stackoverflow answer but there's no clarity.

How to add password to google cloud memorystore

Any reference links for this is highly appreciated.

Answer 1

According to the official documentation:

Connecting to a Redis instance

"You can connect to the Redis instance from any Compute Engine VM instance located within the same project, region and network as the Redis instance."

Therefore authentication and authorization for memorystore using service accounts credentials is not supported.

A feature request was opened on this limitation:

Implementing Authentication for Cloud Memorystore Public

Answer 2

You can define a firewall rules on service account. Like this, the authentication is the service account mounted on the VM that try to reach the memoryStore (port 6379). And the authorization is, the firewall rule itself (Allow or deny the traffic from the service account).