AKS Doesn't Use the Paid SKU for its SLA misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_170
Category - Subcategory	Public Exposure - Ingress Controls
Provider	AZURE
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

For production-grade Azure Kubernetes Service (AKS) deployments, it's recommended to use the Paid SKU to enable an Uptime SLA for the control plane components. The Uptime SLA ensures availability and redundancy for your AKS cluster, making it more resilient to outages.

This rule checks to make sure that AKS clusters are configured to use the "Standard" SKU tier, which includes the Uptime SLA.

How to Fix

Resource: azurerm_kubernetes_cluster

• Arguments: sku_tier [source,go]

---

resource "azurerm_kubernetes_cluster" "example" { name = "example-aks1" location = azurerm_resource_group.example.location resource_group_name = azurerm_resource_group.example.name

• sku_tier = "Standard"

default_node_pool { name = "default" node_count = 1 vm_size = "Standard_D2_v2" }

identity { type = "SystemAssigned" }

tags = { Environment = "production" } }