CIS Azure Kubernetes Service (AKS) Benchmark

XEIZE supports major IaC checks related to the CIS Azure Kubernetes Service (AKS) Benchmark.

Main areas covered

Section Area Description
1 Cluster setup Enabling RBAC, Private Cluster, API Server Authorized IP Ranges, and disabling Kubernetes Dashboard
2 Networking NetworkPolicy configuration
3 Storage and logging Disk Encryption Set, Azure Monitor, and diagnostic logs
4 Policy Azure Policy add-on

References