AKS does not use Azure policies add-on misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_116
Category - Subcategory	Kubernetes - Native Security Controls
Provider	AZURE
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

Azure Policy Add-on for AKS extends Gatekeeper v3, an admission controller webhook for Open Policy Agent (OPA), to apply at-scale enforcements and safeguards on your clusters in a centralized, consistent manner.

How to Fix

Resource: azurerm_kubernetes_cluster

• Arguments: addon_profile.azure_policy.enabled [source,go]

---

resource "azurerm_kubernetes_cluster" "example" { ...

• addon_profile {
• azure_policy {
• enabled = true } } }

---