Link Search Menu Expand Document

Ensure AKS has an API Server Authorized IP Ranges enabled


The API server is the central way to interact with and manage a cluster. To improve cluster security and minimize attacks, the API server should only be accessible from a limited set of IP address ranges.

Insecure Example

The following example will fail the AZU008 check.

resource "azurerm_kubernetes_cluster" "my-aks-cluster" {


Secure Example

The following example will pass the AZU008 check.

resource "azurerm_kubernetes_cluster" "my-aks-cluster" {
    api_server_authorized_ip_ranges = [