Microsoft provides security benchmarks and standards for establishing secure, compliant environments within the Azure cloud platform. Some of the most relevant concepts are provided below with some example reference architectures to follow. The official document that maintains these standards is known as the Azure Security Benchmark. This project exists to serve as a way to more easily navigate the security standards and best practices relevant to AKS.

For information about the roadmap for AKS, see here

The security baseline for AKS provides compliance with the Azure Security Benchmark v1. This document should be used as a reference for establishing a secure cluster that is compliant with regulatory standards and security controls outlined in the benchmark.

Below are documents that have official guidance on implementing secure practices using AKS.

• Security Considerations
• Security Concepts
• Security Controls
• Built-In Policies
• Azure Policy Security Controls for AKS
• CIS Kubernetes Benchmark
• Secure Pod Traffic
• Integration with existing networks

• Baseline
• Well Architected Framework
• Well Architected AKS
• Self-Assesment
• Micro-services

• Developer Best Practices
• Autogenerate container artifacts with Draft
• Pod Best Practices
• Bridge to Kubernetes
• Chaos Engineering and Testing
• GitOps
• Landing Zone Accelerators

• KeyVault RBAC
• Use a CSI Driver
• Add Key Management to a cluster

• Storage Overview
• Use a CSI

• Identity Overview
• Defender for Containers
• Managed AAD Integration
• Pod Identities in AAD

• Azure Monitor
• Container Insights
• Alerts

• Kubelet Logs
• Resource Logs
• Live Logs