AzPolicyAdvertizer

last sync: 2024-May-06 19:17:58 UTC

Azure Kubernetes Service Clusters should enable workload identity

Azure BuiltIn Policy definition

Source Azure Portal
Display name Azure Kubernetes Service Clusters should enable workload identity
Id 2cc2e023-0dac-4046-875b-178f683929d5
Version 1.0.0
Details on versioning
Category Kubernetes
Microsoft Learn
Description Workload identity allows to assign a unique identity to each Kubernetes Pod and associate it with Azure AD protected resources such as Azure Key Vault, enabling secure access to these resources from within the Pod. Learn more at: https://aka.ms/aks/wi.
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Default
Audit
Allowed
Audit, Disabled
RBAC role(s) none
Rule aliases IF (1)
Alias Namespace ResourceType DefaultPath Modifiable
Microsoft.ContainerService/managedClusters/securityProfile.workloadIdentity.enabled Microsoft.ContainerService managedClusters properties.securityProfile.workloadIdentity.enabled false
Rule resource types IF (1)
Microsoft.ContainerService/managedClusters
Compliance Not a Compliance control
Initiatives usage none
History
Date/Time (UTC ymd) (i) Change type Change detail
2023-08-03 17:56:09 add 2cc2e023-0dac-4046-875b-178f683929d5
JSON compare n/a
JSON
api-version=2021-06-01
EPAC