Current default redis cache configuration (for groups cache for Azure) sets cache expiration time as 1 hour. This is an issue because 1 hour is too long, any recent changes on user's groups will not be picked up by the cache.
- User makes a Storage call with token 1
- A new group is created with Entitlements service and user is added to that group
- User makes a Storage call which requires user to be in this new group (which he/she is)
With 1 hour cache expiration, storage will fail to sync cache with this new membership, and return 403 for user. Thus, this expiration should be much lower.