last sync: 2025-Apr-29 17:16:02 UTC

Azure Kubernetes Clusters should disable SSH

Azure BuiltIn Policy definition

Source Azure Portal
Display name Azure Kubernetes Clusters should disable SSH
Id 28257686-e9db-403e-b9e2-a5eecbe03da9
Version 1.0.0
Details on versioning
Versioning Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]
Category Kubernetes
Microsoft Learn
Description Disable SSH gives you the ability to secure your cluster and reduce the attack surface. To learn more, visit: aka.ms/aks/disablessh
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Disabled
RBAC role(s) none
Rule aliases IF (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.ContainerService/managedClusters/agentPoolProfiles[*] Microsoft.ContainerService managedClusters properties.agentPoolProfiles[*] True False
Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].securityProfile.sshAccess Microsoft.ContainerService managedClusters properties.agentPoolProfiles[*].securityProfile.sshAccess True False
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-06-24 18:15:26 add 28257686-e9db-403e-b9e2-a5eecbe03da9
JSON compare n/a
JSON
api-version=2021-06-01
EPAC