last sync: 2025-May-22 17:43:25 UTC

AKS prevent node public ip

Community Policy definition

Source Repository Community-Policy GitHub
JSON Community-Policy GitHub
Deploy policy 82417f79-38c7-4446-ae2c-3c4fd7f06d89 (1.0.0) to Azure
Display name AKS prevent node public ip
Id 82417f79-38c7-4446-ae2c-3c4fd7f06d89
Version 1.0.0
Details on versioning
Category Kubernetes
Microsoft Learn
Description This policy prevent node public ip for aks.
Mode Indexed
Type Custom Community
Effect Default
Audit
Allowed
Deny, Audit, Disabled
RBAC role(s) none
Rule aliases IF (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.ContainerService/managedClusters/agentPoolProfiles[*] Microsoft.ContainerService managedClusters properties.agentPoolProfiles[*] True False
Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableNodePublicIP Microsoft.ContainerService managedClusters properties.agentPoolProfiles[*].enableNodePublicIP True False
Rule resource types IF (1)
Microsoft.ContainerService/managedClusters
JSON
EPAC
Deploy policy 82417f79-38c7-4446-ae2c-3c4fd7f06d89 (1.0.0) to Azure