Azure Kubernetes Service (AKS) Benchmark

Ensure clusters are created with Private Nodes
Profile Applicability: Level 1 Description:  When creating an Azure Kubernetes Service (AKS) cluster, it is a best practice to use private nodes to en...
Fri, 9 May, 2025 at 3:18 AM
Ensure Network Policy is Enabled and set as appropriate
Profile Applicability: Level 1 Description:  Network policies in Kubernetes are used to control the traffic flow between pods and services within the...
Fri, 9 May, 2025 at 3:24 AM
Encrypt traffic to HTTPS load balancers with TLS certificates
Profile Applicability: Level 2 Description:  Traffic to and from a load balancer should be encrypted to ensure the confidentiality and integrity of th...
Fri, 9 May, 2025 at 3:28 AM
Manage Kubernetes RBAC users with Azure AD
 Profile Applicability: Level 2 Description:  Integrating Azure Active Directory (Azure AD) with Kubernetes Role-Based Access Control (RBAC) allows yo...
Fri, 9 May, 2025 at 3:33 AM
Use Azure RBAC for Kubernetes Authorization
Profile Applicability: Level 2 Description:  Azure Kubernetes Service (AKS) allows you to use Azure Role-Based Access Control (RBAC) to manage access ...
Fri, 9 May, 2025 at 3:39 AM
Apply Security Context to Your Pods and Containers
Profile Applicability: Level 1 Description:  A Security Context in Kubernetes defines privilege and access control settings for a Pod or Container. ...
Fri, 9 May, 2025 at 5:07 AM
The default namespace should not be used
Profile Applicability: Level 1 Description:  Kubernetes automatically creates a default namespace for all resources that are not explicitly assigned...
Fri, 9 May, 2025 at 5:13 AM
Ensure that the seccomp profile is set to docker/default in your pod definitions
Profile Applicability: Level 1 Description:  The seccomp (secure computing mode) profile in Kubernetes allows you to restrict the system calls that ...
Fri, 9 May, 2025 at 5:18 AM