- CheckMates
- :
- Products
- :
- CloudMates Products
- :
- CNAPP
- :
- Dome9 support for Azure Kubernetes Service (AKS)
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dome9 support for Azure Kubernetes Service (AKS)
Dome9 now supports Azure Kubernetes Service (AKS) which is an open-source fully managed container orchestration service. AKS helps in provisioning, scaling, and upgrades of resources as per requirement or demand without any downtime in the Kubernetes cluster.
As part of our Cloud Security Posture Management and Compliance module, you are now able to evaluate security of AKS using GSL language.
Few examples:
Ensure that the pod security policy is enabled in your AKS cluster
GSL : AksCluster should have properties.enablePodSecurityPolicy=true
Ensure that you are using authorized IP address ranges in order to secure access to the API server
GSL : AksClustershould not haveproperties.apiServerAccessProfile.authorizedIPRanges isEmpty()
Ensure that a network policy is in place to secure traffic between pods
GSL: AksCluster should not have properties.networkProfile.networkPolicy isEmpty()
![](/skins/images/4BAE0211AB62E3B2F85E95CA468FEED0/responsive_peak/images/icon_anonymous_message.png)