> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes Misconfig for AZURE

### Checks Performed

* [Apply Security Context To Your Pods And Containers](azurekubernetesmisconfig/rules/azure_apply_pod_security_context)
* [Apply Security Context Your Pods And Containers](azurekubernetesmisconfig/rules/azure_apply_security_context_your_pods_and_containers)
* [Azure Json File Ownership Set To Root Root](azurekubernetesmisconfig/rules/azure_azure_json_file_ownership_root)
* [Azure Json File Permissions Set To 644 Or More Restrictive](azurekubernetesmisconfig/rules/azure_azure_json_file_permissions_644)
* [Consider External Secret Storage](azurekubernetesmisconfig/rules/azure_consider_external_secret_storage)
* [Consider External Secret Storage](azurekubernetesmisconfig/rules/azure_external_secret_storage)
* [Create Administrative Boundaries Between Resources Using Namespaces](azurekubernetesmisconfig/rules/azure_create_administrative_boundaries_between_resources_using_namespaces)
* [Create Administrative Boundaries Between Resources Using Namespaces](azurekubernetesmisconfig/rules/azure_create_namespace_boundaries)
* [Enable Audit Logs](azurekubernetesmisconfig/rules/azure_aks_enable_audit_logs)
* [Enable Audit Logs](azurekubernetesmisconfig/rules/azure_enable_audit_logs)
* [Enable Image Vulnerability Scanning With Microsoft Defender](azurekubernetesmisconfig/rules/azure_acr_image_vulnerability_scanning_defender)
* [Encrypt Traffic Https Load Balancers With Tls Certificates](azurekubernetesmisconfig/rules/azure_encrypt_traffic_https_load_balancers_with_tls_certificates)
* [Encrypt Traffic To HTTPS Load Balancers With TLS Certificates](azurekubernetesmisconfig/rules/azure_encrypt_traffic_https_load_balancers_tls)
* [Ensure Anonymous Auth Argument Is Disabled](azurekubernetesmisconfig/rules/azure_ensure_anonymous_auth_argument_disabled)
* [Ensure Authorization Mode Argument Is Not Set Always Allow](azurekubernetesmisconfig/rules/azure_ensure_authorization_mode_argument_is_not_alwaysallow)
* [Ensure Client Ca File Argument Is Set Appropriate](azurekubernetesmisconfig/rules/azure_ensure_client_ca_file_argument_appropriate)
* [Ensure Cluster Admin Role Is Only Used Where Required](azurekubernetesmisconfig/rules/azure_ensure_cluster_admin_role_only_used_where_required)
* [Ensure Clusters Are Created With Private Endpoint Enabled And Public Access Disabled](azurekubernetesmisconfig/rules/azure_ensure_clusters_created_private_endpoint_enabled_and_public_access_disabled)
* [Ensure Clusters Are Created With Private Nodes](azurekubernetesmisconfig/rules/azure_clusters_created_with_private_nodes)
* [Ensure Clusters Are Created With Private Nodes](azurekubernetesmisconfig/rules/azure_ensure_clusters_are_created_private_nodes)
* [Ensure Clusters Use Private Endpoint With Public Access Disabled](azurekubernetesmisconfig/rules/azure_private_endpoint_enabled_public_access_disabled)
* [Ensure Default Service Accounts Are Not Actively Used](azurekubernetesmisconfig/rules/azure_default_service_accounts_not_used)
* [Ensure Default Service Accounts Are Not Actively Used](azurekubernetesmisconfig/rules/azure_ensure_default_service_accounts_are_not_actively_used)
* [Ensure Event Record Qps Argument Is Set 0 Level Which Ensures Appropriate Event Capture](azurekubernetesmisconfig/rules/azure_ensure_eventrecordqps_argument_set_0_level_which_ensures_appropriate_event_capture)
* [Ensure Hostname Override Argument Is Not Set](azurekubernetesmisconfig/rules/azure_ensure_hostname_override_argument_not_set)
* [Ensure Image Vulnerability Scanning Using Azure Defender Image Scanning Third Party Provider](azurekubernetesmisconfig/rules/azure_ensure_image_vulnerability_scanning_azure_defender_image_scanning_or_third_party_provider)
* [Ensure Kubeconfig File Permissions Are Restrictive](azurekubernetesmisconfig/rules/azure_ensure_kubeconfig_file_permissions_restrictive)
* [Ensure Kubelet Configuration File Has Permissions Restrictive](azurekubernetesmisconfig/rules/azure_ensure_kubelet_configuration_file_permissions_restrictive)
* [Ensure Kubelet Configuration File Ownership Is Set Root](azurekubernetesmisconfig/rules/azure_ensure_kubelet_configuration_ownership_root)
* [Ensure Kubelet Kubeconfig File Ownership Is Set Root](azurekubernetesmisconfig/rules/azure_ensure_kubelet_kubeconfig_file_ownership_root)
* [Ensure Kubernetes Secrets Are Encrypted](azurekubernetesmisconfig/rules/azure_ensure_kubernetes_secrets_are_encrypted)
* [Ensure Kubernetes Secrets Are Encrypted](azurekubernetesmisconfig/rules/azure_kubernetes_secrets_encrypted_key_vault)
* [Ensure Latest Cni Version Is Used](azurekubernetesmisconfig/rules/azure_ensure_latest_cni_version_is_used)
* [Ensure Latest CNI Version Is Used](azurekubernetesmisconfig/rules/azure_latest_cni_version)
* [Ensure Make Ptables Util Chains Argument Is Enabled](azurekubernetesmisconfig/rules/azure_ensure_make_iptables_util_chains_argument_enabled)
* [Ensure Network Policy Is Enabled And Appropriate](azurekubernetesmisconfig/rules/azure_ensure_network_policy_is_enabled_appropriate)
* [Ensure Network Policy Is Enabled And Set Appropriately](azurekubernetesmisconfig/rules/azure_network_policy_enabled)
* [Ensure Protect Kernel Defaults Argument Is Enabled](azurekubernetesmisconfig/rules/azure_ensure_protect_kernel_defaults_argument_enabled)
* [Ensure Read Only Port Is Secured](azurekubernetesmisconfig/rules/azure_ensure_read_only_port_is_secured)
* [Ensure Rotate Certificates Argument Is Not Disabled](azurekubernetesmisconfig/rules/azure_ensure_rotate_certificates_argument_is_not_disabled)
* [Ensure Rotate Kubelet Server Certificate Argument Is Enabled](azurekubernetesmisconfig/rules/azure_ensure_rotate_kubelet_server_certificate_argument_is_enabled)
* [Ensure Service Account Tokens Are Only Mounted Where Necessary](azurekubernetesmisconfig/rules/azure_ensure_service_account_tokens_only_mounted_where_necessary)
* [Ensure Service Account Tokens Are Only Mounted Where Necessary](azurekubernetesmisconfig/rules/azure_minimize_service_account_token_mount)
* [Ensure Streaming Connection Idle Timeout Argument Is Not Set 0](azurekubernetesmisconfig/rules/azure_ensure_streaming_connection_idle_timeout_argument_is_not_0)
* [Ensure That All Namespaces Have Network Policies Defined](azurekubernetesmisconfig/rules/azure_namespaces_have_network_policies)
* [Ensure That All Namespaces Network Policies Defined](azurekubernetesmisconfig/rules/azure_ensure_namespaces_network_policies_defined)
* [Ensure The Cluster-Admin Role Is Only Used Where Required](azurekubernetesmisconfig/rules/azure_restrict_cluster_admin_role)
* [Hostile Multi Tenant Workloads](azurekubernetesmisconfig/rules/azure_hostile_multi_tenant_workloads)
* [Kubelet Anonymous Auth Set To False](azurekubernetesmisconfig/rules/azure_kubelet_anonymous_auth_disabled)
* [Kubelet Authorization Mode Not Set To AlwaysAllow](azurekubernetesmisconfig/rules/azure_kubelet_authorization_mode_not_alwaysallow)
* [Kubelet Client CA File Set As Appropriate](azurekubernetesmisconfig/rules/azure_kubelet_client_ca_file_set)
* [Kubelet Event Record QPS Set For Appropriate Event Capture](azurekubernetesmisconfig/rules/azure_kubelet_event_qps_appropriate)
* [Kubelet Kubeconfig File Ownership Set To Root Root](azurekubernetesmisconfig/rules/azure_kubelet_kubeconfig_file_ownership_root)
* [Kubelet Kubeconfig File Permissions Set To 644 Or More Restrictive](azurekubernetesmisconfig/rules/azure_kubelet_kubeconfig_file_permissions_644)
* [Kubelet Make IPTables Util Chains Set To True](azurekubernetesmisconfig/rules/azure_kubelet_make_iptables_util_chains_enabled)
* [Kubelet Read Only Port Secured](azurekubernetesmisconfig/rules/azure_kubelet_read_only_port_secured)
* [Kubelet Rotate Certificates Not Set To False](azurekubernetesmisconfig/rules/azure_kubelet_rotate_certificates_not_false)
* [Kubelet RotateKubeletServerCertificate Set To True](azurekubernetesmisconfig/rules/azure_kubelet_rotate_server_certificate_enabled)
* [Kubelet Streaming Connection Idle Timeout Not Set To Zero](azurekubernetesmisconfig/rules/azure_kubelet_streaming_connection_idle_timeout_not_zero)
* [Limit Use Of The Bind, Impersonate And Escalate Permissions](azurekubernetesmisconfig/rules/azure_limit_bind_impersonate_escalate)
* [Manage Kubernetes Rbac Users With Azure Ad](azurekubernetesmisconfig/rules/azure_manage_kubernetes_rbac_users_azure_ad)
* [Manage Kubernetes RBAC Users With Azure AD](azurekubernetesmisconfig/rules/azure_manage_kubernetes_rbac_users_with_azure_ad)
* [Minimize Access Secrets](azurekubernetesmisconfig/rules/azure_minimize_access_secrets)
* [Minimize Access To Create Persistent Volumes](azurekubernetesmisconfig/rules/azure_minimize_create_persistent_volumes)
* [Minimize Access To Create Pods](azurekubernetesmisconfig/rules/azure_minimize_access_create_pods)
* [Minimize Access To Create Pods](azurekubernetesmisconfig/rules/azure_minimize_create_pods_access)
* [Minimize Access To Secrets](azurekubernetesmisconfig/rules/azure_minimize_secret_access)
* [Minimize Access To The Approval Sub-Resource Of CertificateSigningRequests](azurekubernetesmisconfig/rules/azure_minimize_csr_approval_access)
* [Minimize Access To The Proxy Sub-Resource Of Nodes](azurekubernetesmisconfig/rules/azure_minimize_node_proxy_access)
* [Minimize Access To The Service Account Token Creation](azurekubernetesmisconfig/rules/azure_minimize_service_account_token_creation)
* [Minimize Access To Webhook Configuration Objects](azurekubernetesmisconfig/rules/azure_minimize_webhook_config_access)
* [Minimize Cluster Access Read Only Azure Container Registry](azurekubernetesmisconfig/rules/azure_minimize_cluster_access_read_only_azure_container_registry)
* [Minimize Cluster Access To Read-Only For Azure Container Registry](azurekubernetesmisconfig/rules/azure_minimize_cluster_access_read_only_acr)
* [Minimize Container Registries Only Those Approved](azurekubernetesmisconfig/rules/azure_minimize_container_registries_only_those_approved)
* [Minimize Container Registries To Only Those Approved](azurekubernetesmisconfig/rules/azure_minimize_container_registries_to_approved)
* [Minimize The Admission Containers Wishing Share The Host Ipc Namespace](azurekubernetesmisconfig/rules/azure_minimize_admission_containers_wishing_share_host_ipc_namespace)
* [Minimize The Admission Containers Wishing Share The Host Network Namespace](azurekubernetesmisconfig/rules/azure_minimize_admission_containers_wishing_share_the_host_network_namespace)
* [Minimize The Admission Containers With Added Capabilities](azurekubernetesmisconfig/rules/azure_minimize_admission_containers_added_capabilities)
* [Minimize The Admission Containers With Allowprivilegeescalation](azurekubernetesmisconfig/rules/azure_minimize_admission_containers_with_allow_privilege_escalation)
* [Minimize The Admission Containers With Capabilities Assigned](azurekubernetesmisconfig/rules/azure_minimize_admission_containers_with_capabilities_assigned)
* [Minimize The Admission Containers With Net\_Raw Capability](azurekubernetesmisconfig/rules/azure_minimize_admission_containers_with_net_raw_capability)
* [Minimize The Admission Of Containers Sharing The Host IPC Namespace](azurekubernetesmisconfig/rules/azure_restrict_host_ipc_containers)
* [Minimize The Admission Of Containers Sharing The Host Network Namespace](azurekubernetesmisconfig/rules/azure_restrict_host_network_containers)
* [Minimize The Admission Of Containers Sharing The Host Process ID Namespace](azurekubernetesmisconfig/rules/azure_restrict_host_pid_containers)
* [Minimize The Admission Of Containers Wishing To Share The Host Process Id Namespace](azurekubernetesmisconfig/rules/azure_minimize_admission_containers_wishing_share_host_process_id_namespace)
* [Minimize The Admission Of Containers With allowPrivilegeEscalation](azurekubernetesmisconfig/rules/azure_restrict_allow_privilege_escalation)
* [Minimize The Admission Of Privileged Containers](azurekubernetesmisconfig/rules/azure_restrict_privileged_containers)
* [Minimize The Admission Privileged Container](azurekubernetesmisconfig/rules/azure_minimize_the_admission_privileged_container)
* [Minimize The Admission Root Containers](azurekubernetesmisconfig/rules/azure_minimize_admission_root_containers)
* [Minimize User Access Azure Container Registry](azurekubernetesmisconfig/rules/azure_minimize_user_access_azure_container_registry)
* [Minimize User Access To Azure Container Registry](azurekubernetesmisconfig/rules/azure_minimize_user_access_to_acr)
* [Minimize Wildcard Use In Roles And ClusterRoles](azurekubernetesmisconfig/rules/azure_minimize_wildcard_use_rbac)
* [Minimize Wildcard Use Roles And Clusterroles](azurekubernetesmisconfig/rules/azure_minimize_wildcard_use_cluster_roles)
* [Prefer Using Dedicated AKS Service Accounts](azurekubernetesmisconfig/rules/azure_prefer_dedicated_aks_service_accounts)
* [Prefer Using Dedicated Aks Service Accounts](azurekubernetesmisconfig/rules/azure_prefer_using_dedicated_aks_service_accounts)
* [Prefer Using Secrets As Files Over Secrets As Environment Variables](azurekubernetesmisconfig/rules/azure_prefer_secrets_as_files)
* [Prefer Using Secrets Files Over Secrets As Environment Variables](azurekubernetesmisconfig/rules/azure_prefer_using_secrets_files_over_secrets_environment_variables)
* [Restrict Access To The Control Plane Endpoint](azurekubernetesmisconfig/rules/azure_restrict_access_control_plane_endpoint)
* [Restrict Untrusted Workloads](azurekubernetesmisconfig/rules/azure_restrict_untrusted_workloads)
* [The Default Namespace Should Not Be Used](azurekubernetesmisconfig/rules/azure_default_namespace_not_used)
* [The Default Namespace Should Not Be Used](azurekubernetesmisconfig/rules/azure_default_namespace_should_not_be_used)
* [Use Azure RBAC For Kubernetes Authorization](azurekubernetesmisconfig/rules/azure_use_azure_rbac_for_kubernetes_authorization)
* [Use Azure Rbac Kubernetes Authorization](azurekubernetesmisconfig/rules/azure_azure_rbac_kubernetes_authorization)
* [Verify That Admission Controllers Are Working Expected](azurekubernetesmisconfig/rules/azure_verify_admission_controllers_are_working_expected)