Skip to content

AKS is not enabled for private clusters

Description

Enable the private cluster feature for your Azure Kubernetes Service cluster to ensure network traffic between your API server and your node pools remains on the private network only. This is a common requirement in many regulatory and industry compliance standards.

Code Example

go
resource "azurerm_kubernetes_cluster" "example" {
                  ...
  +               private_cluster_enabled = true
                  
                }

Remediation

Terraform

  • Resource: azurerm_kubernetes_cluster
  • Arguments: private_cluster_enabled

Rule Details

FieldValue
IDIAC-0622
SeverityLOW
IaC TypeTerraform
FrameworksTerraform, TerraformPlan
Checkov IDCKV_AZURE_115

References