Vendor services misconfigurationsAKS cluster is not using Azure Active Directory authentication
Platform(s)
Compliance Frameworks
- AKS CIS ,
- CCPA ,
- CPRA ,
- iso_27001_2022 ,
- iso_27002_2022 ,
- K8s OWASP Top 10 ,
- Microsoft Cloud Security Benchmark ,
- NIST 800-171 ,
- NIST 800-53 ,
- PDPA ,
- UK Cyber Essentials
Description
Azure Kubernetes Service (AKS) can be configured to use Azure Active Directory (AD) for user authentication. In this configuration, you sign in to an AKS cluster using an Azure AD authentication token. You can also configure Kubernetes role-based access control (Kubernetes RBAC) to limit access to cluster resources based on a user's identity or group membership. Kubernetes RBAC and AKS help you secure your cluster access and provide only the minimum required permissions to developers and operators. It was detected that {AzureAksCluster} cluster does not have Azure AD authentication enabled.
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.