Microsoft provides security benchmarks and standards for establishing secure, compliant environments within the Azure cloud platform. Some of the most relevant concepts are provided below with some example reference architectures to follow. The official document that maintains these standards is known as the Azure Security Benchmark. This project exists to serve as a way to more easily navigate the security standards and best practices relevant to AKS.
For information about the roadmap for AKS, see here
The security baseline for AKS provides compliance with the Azure Security Benchmark v1. This document should be used as a reference for establishing a secure cluster that is compliant with regulatory standards and security controls outlined in the benchmark.
Below are documents that have official guidance on implementing secure practices using AKS.
- Security Considerations
- Security Concepts
- Security Controls
- Built-In Policies
- Azure Policy Security Controls for AKS
- CIS Kubernetes Benchmark
- Secure Pod Traffic
- Integration with existing networks