Description

The ability to manage RBAC (Role-Based Access Control) for Kubernetes resources from Azure gives you the choice to manage RBAC for the cluster resources either using Azure or native Kubernetes mechanisms. When enabled, Azure AD (Active Directory) principals will be validated exclusively by Azure RBAC while regular Kubernetes users and service accounts are exclusively validated by Kubernetes RBAC. It was detected that {AzureAksCluster} cluster does not have Azure AD authorization enabled.

• 

  Recommended Mitigation

  It is recommended to enable Azure AD authorization on all AKS clusters. For more information see <a href="https://learn.microsoft.com/en-us/azure/aks/manage-azure-rbac" target="_blank" rel="noopener noreferrer">https://learn.microsoft.com/en-us/azure/aks/manage-azure-rbac</a>